Re: Gokar Worm?

["Johannes B. Ullrich" <jullrich () sans org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


For details see:
http://www.messagelabs.com/viruseye/report.asp?id=90

On Thu, 13 Dec 2001, Jeremy G Byrne wrote:

> Hi All--
>
> Just received a message cleaned by yahoogroups.com of
> something their NT-based "InterScan E-Mail VirusWall"
> product calls "WORM_GOKAR.A". The social engineering
...
> The really odd thing is that I can't find any references
> to a "Gokar Worm" on google, google's usenet mirror, or
> on several specialist av sites I've checked. Is this a 
> case of commercial non-disclosure?

- -- 
- -------
jullrich () sans org                    Join http://www.DShield.org
                          Distributed Intrusion Detection System

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8GPYvwWQP+4im9DYRAs5jAJ9ze4N6OZY/8ChfcTpR1cDkITVvlQCgpjEV
rSZN0rSHUgEMR+eI0VHiKqA=
=8llE
-----END PGP SIGNATURE-----


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com