Blackworm' D-Day/Kama Sutra worm

Discussion in 'NOD32 version 2 Forum' started by Onslaught7037, Jan 27, 2006.

Thread Status:
Not open for further replies.
  1. Onslaught7037

    Onslaught7037 Registered Member

    Joined:
    Dec 31, 2005
    Posts:
    8
    I have been a supporter of Nod 32 for a long time and Iwas just wondering when Nod32 first detected this worm.
     
    Onslaught7037, Jan 27, 2006
    #1
  2. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,752
    Location:
    Toronto Canada
    This very helpful site has a search function. http://ip2.users.whitehat.dk/server_status.php Nod may have a different name for it though.
     
    Last edited: Jan 27, 2006
    The Hammer, Jan 27, 2006
    #2
  3. Onslaught7037

    Onslaught7037 Registered Member

    Joined:
    Dec 31, 2005
    Posts:
    8
    Thanks for your help.
     
    Onslaught7037, Jan 27, 2006
    #3
  4. flyrfan111

    flyrfan111 Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    1,229
    NOD detects it as Win32/VB.NEI from the 18th of January.


    NOD32 - 1.1370 20060118 / posted 11:31)Virus signature database updates:
    Win32/TrojanDownloader.Sickob.B (2), Win32/VB.NEI (5)
     
    flyrfan111, Jan 27, 2006
    #4
  5. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    As far as I know, it was picked up by Advanced heuristics before a signature was added.
     
    Marcos, Jan 28, 2006
    #5
  6. sir_carew

    sir_carew Registered Member

    Joined:
    Sep 2, 2003
    Posts:
    884
    Location:
    Santiago, Chile
    I can confirm this :)

     
    sir_carew, Jan 28, 2006
    #6
  7. dvk01

    dvk01 Global Moderator

    Joined:
    Oct 9, 2003
    Posts:
    3,131
    Location:
    Loughton, Essex. UK
    I received some of the first copies spreading on teh 17th from 1400 onwards UK time NOD detected heuristically as unknown PE whereas many AV's didn't until samples were submitted
     
    dvk01, Jan 28, 2006
    #7
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...