http://www.cisrt.org/enblog/index.php en-US http://www.cisrt.org/enblog/read.php?156 smallmo <smallmo@cisrt.com> Tue, 28 Aug 2007 09:37:45 +0000 http://www.cisrt.org/enblog/read.php?156
The file name is "G038_jpg.zip". In the .zip file, it contains a .com file "www.G038_jpg-msn.com". Kaspersky detects it as Backdoor.Win32.IRCBot.aex. Be careful.

The details about this variant:
............

Tags - g038 jpg.zip , cdspeed.exe , www.g038 jpg-msn.com , backdoor.win32.ircbot ]]> http://www.cisrt.org/enblog/read.php?156#blogcomment283 Roy <ajax_3963@hotmail.com> Tue, 28 Aug 2007 15:39:14 +0000 http://www.cisrt.org/enblog/read.php?156#blogcomment283 Some friends already have the Worm, I linked them to this site so they can remove them, thanks. ]]> http://www.cisrt.org/enblog/read.php?156#blogcomment284 LLam <user@domain.com> Tue, 28 Aug 2007 18:56:19 +0000 http://www.cisrt.org/enblog/read.php?156#blogcomment284
www.chilled.hu ]]> http://www.cisrt.org/enblog/read.php?156#blogcomment285 BendeBoy <spam@bendeboy.nl> Tue, 28 Aug 2007 22:02:39 +0000 http://www.cisrt.org/enblog/read.php?156#blogcomment285
Your welcome :) ]]> http://www.cisrt.org/enblog/read.php?156#blogcomment286 h <user@domain.com> Wed, 29 Aug 2007 00:21:58 +0000 http://www.cisrt.org/enblog/read.php?156#blogcomment286 http://www.cisrt.org/enblog/read.php?156#blogcomment287 Ngp <user@domain.com> Wed, 29 Aug 2007 00:36:18 +0000 http://www.cisrt.org/enblog/read.php?156#blogcomment287 http://www.cisrt.org/enblog/read.php?156#blogcomment288 Morgoth <user@domain.com> Wed, 29 Aug 2007 18:09:16 +0000 http://www.cisrt.org/enblog/read.php?156#blogcomment288 I linked your guide into my site ]]> http://www.cisrt.org/enblog/read.php?156#blogcomment289 mariobros <user@domain.com> Wed, 29 Aug 2007 18:31:47 +0000 http://www.cisrt.org/enblog/read.php?156#blogcomment289 http://www.cisrt.org/enblog/read.php?156#blogcomment298 anne <user@domain.com> Mon, 03 Sep 2007 14:31:32 +0000 http://www.cisrt.org/enblog/read.php?156#blogcomment298 please help me.
I com from holland. please:'( big kiss anne ]]> http://www.cisrt.org/enblog/read.php?156#blogcomment299 maddie <user@domain.com> Thu, 06 Sep 2007 00:07:19 +0000 http://www.cisrt.org/enblog/read.php?156#blogcomment299 one? ]]> http://www.cisrt.org/enblog/read.php?156#blogcomment304 sophieBimbo <user@domain.com> Mon, 10 Sep 2007 15:09:39 +0000 http://www.cisrt.org/enblog/read.php?156#blogcomment304
appreciate much..
get back to me @ rastachic@gmail.com ]]>