AVERT Low-Profiled Threat Notice: PERL/Santy.worm

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 12/22/04


Date: Tue, 21 Dec 2004 20:09:42 -0500

Notice
This is a Low-Profiled Threat Notice for PERL/Santy.worm.

Justification
PERL/Santy.worm has been deemed Low-Profiled due to Media Attention at
http://news.com.com/Net%2Bworm%2Busing%2BGoogle%2Bto%2Bspread/2100%2D7349_3%2D5499725.html.
PERL/Santy.worm is referred to as the Santy worm within the article.

Read About It
Information about PERL/Santy.worm is located on VIL at:
http://vil.nai.com/vil/content/v_130471.htm

Detection
PERL/Santy.worm was first discovered on 12/21/2004 and detection will be added to the 4416
dat files (Release Date: 12/22/2004).

Though we consider this a low threat, AVERT has posted an extra.dat as part of the above
description for your convenience.

If you suspect you have PERL/Santy.worm, please submit a sample to http://www.webimmune.net.

Risk Assessment Definition
For further information on the Risk Assessment and AVERT Recommended Actions please see:
http://www.mcafeesecurity.com/us/security/resources/risk_assessment.htm

Best Regards,

McAfee AVERT - Anti Virus and Vulnerability Research, Analysis, and
Solutions visit us at www.avertlabs.com

~ ~ ~
Dave



Relevant Pages

  • AVERT Low-Profiled Threat Notice: PWS-WebMoney.gen Trojan
    ... This is a Low-Profiled Threat Notice for PWS-WebMoney.gen trojan. ... PWS-WebMoney.gen was first discovered on 06/29/2004 and detection will ... For further information on the Risk Assessment and AVERT Recommended ...
    (microsoft.public.security.virus)
  • AVERT Threat Notice: W32/Nachi.worm.b UPDATE
    ... This is a Low-Profiled Threat Notice update for W32/Nachi.worm.b ... W32/Nachi.worm.b was first discovered on 02/11/2004 and detection was available from the ... Though we consider this a low threat, AVERT has posted an extra.dat as part of the above ... For further information on the Risk Assessment and AVERT Recommended Actions please see: ...
    (microsoft.public.scripting.virus.discussion)
  • AVERT Threat Notice: W32/Nachi.worm.b UPDATE
    ... This is a Low-Profiled Threat Notice update for W32/Nachi.worm.b ... W32/Nachi.worm.b was first discovered on 02/11/2004 and detection was available from the ... Though we consider this a low threat, AVERT has posted an extra.dat as part of the above ... For further information on the Risk Assessment and AVERT Recommended Actions please see: ...
    (microsoft.public.security.virus)
  • AVERT Low-Profiled Threat Notice: BackDoor-AXJ.gen
    ... This is a Low-Profiled Threat Notice for BackDoor-AXJ.gen. ... detection will be added to the 4370 dat files ... For further information on the Risk Assessment and AVERT Recommended Actions ...
    (microsoft.public.security.virus)
  • AVERT Low-Profiled Threat Notice: W32/Buchon.gen@MM
    ... This is a Low-Profiled Threat Notice for W32/Buchon.gen@MM. ... W32/Buchon.gen@MM was first discovered on 10/21/2004 and detection will be added to the 4401 ... Though we consider this a low threat, AVERT has posted an extra.dat as part of the above ... For further information on the Risk Assessment and AVERT Recommended Actions please see: ...
    (microsoft.public.security.virus)