Win32.Korgo

Are NOD users protected against Korgo or Padobot? Can't find it in the updates listed on the update page.

 

I guess nobody knows

 

From what I can see the worm was released by a team of Russians on May 24th; http://www.f-secure.com/v-descs/korgo.shtml

A little worrying is it does not yet appear in the virus database of Nod32 under the name of Korgo or Padobot; http://www.nod32.com/support/info.htm

Though it may be there under another name as has happened in the past and been suggested by Ronjor.

Cheers

 

NOD32 - v.1.779 (20040602)
Virus signature database updates:
IRC/SdBot.ATF, IRC/SdBot.ATG, IRC/SdBot.ATH, Java/ProxyRun.A, Linux/Ovets.B, Win32/Botanvec.A, Win32/Delikon.A, Win32/Exploit.AntiRAR.A, Win32/IRCBot.LD, Win32/Korgo.C, Win32/PSW.LdPinch.NAG, Win32/Rbot.B, Win32/Singu.J, Win32/Small.BP, Win32/Spy.Banbra.G, Win32/Spy.Banbra.H, Win32/Spy.Tofger.AE, Win32/Spy.Tofger.NAA, Win32/StartPage.NAO, Win32/Stepaik.B, Win32/Theef.201, Win32/TrojanDownloader.Lemmy.H, Win32/TrojanDownloader.Rameh.C, Win32/TrojanDownloader.Tooncom.P, Win32/TrojanDownloader.Wintrim.BA, Win32/TrojanDropper.MultiDropper.AF, Win32/TrojanDropper.MultiDropper.AG, Win32/TrojanNotifier.Small.A, Win32/TrojanProxy.Agent.NAA, Win32/TrojanProxy.Migmaf.C, Win32/Xombe.C

 

Actually there´s a F version of the vulnerability.

Check: http://www.vsantivirus.com/ ((Spanish Website))
Check for english version in that window, up on screen´s right.

And I wonder: does NOD32 can detect and stop unknown and coming versions using heuristics? I hope so... window´s patch seems not to work properly. Thanks!

backfolder.-

 

Hi!

Nod detect only Win32/Korgo.C. I wonder why virus name is C. Where are A,B, D, E , F,G, H? Is it possible that this variant NOD doesn't detect?

izi

 

I now see Korgo A and C in the signature update lists. A was added after C.

 

Detections for versions B, E, F G have been added in v.1.781 (20040604)
D version is still missing

 

Thanks to all for answering.