AVERT Threat Notice: W32/Nachi.worm.b UPDATE

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 02/12/04 

Date: Thu, 12 Feb 2004 10:30:15 -0500

Notice
This is a Low-Profiled Threat Notice update for W32/Nachi.worm.b

Justification
This worm has been updated from Low to Low-Profiled due to Media Attention at:
http://www.vnunet.com/News/1152735.

W32/Nachi.worm.b is referred to as Nachi-B or Welchi within the article.

Read About It
Information about W32/Nachi.worm.b is located on VIL at:
http://vil.nai.com/vil/content/v_101013.htm

Detection
W32/Nachi.worm.b was first discovered on 02/11/2004 and detection was available from the
4290 DAT files (Release Date: 08/28/2003) as Exploit-DcomRpc.gen . Named detection will be
added to the 4324 dat files (Release Date: 02/19/2004).

Though we consider this a low threat, AVERT has posted an extra.dat as part of the above
description for your convenience.

If you suspect you have W32/Nachi.worm.b, please submit a sample to
http://www.webimmune.net/

Risk Assessment Definition
For further information on the Risk Assessment and AVERT Recommended Actions please see:
http://www.networkassociates.com/us/security/resources/risk_assessment.htm

Best Regards,

McAfee AVERT - Anti Virus Research, Analysis, and Outbreak Management visit us at
www.avertlabs.com

Relevant Pages

  • AVERT Low-Profiled Threat Notice: PWS-WebMoney.gen Trojan
    ... This is a Low-Profiled Threat Notice for PWS-WebMoney.gen trojan. ... PWS-WebMoney.gen was first discovered on 06/29/2004 and detection will ... For further information on the Risk Assessment and AVERT Recommended ...
    (microsoft.public.security.virus)
  • AVERT Threat Notice: W32/Nachi.worm.b UPDATE
    ... This is a Low-Profiled Threat Notice update for W32/Nachi.worm.b ... W32/Nachi.worm.b was first discovered on 02/11/2004 and detection was available from the ... Though we consider this a low threat, AVERT has posted an extra.dat as part of the above ... For further information on the Risk Assessment and AVERT Recommended Actions please see: ...
    (microsoft.public.security.virus)
  • AVERT Low-Profiled Threat Notice: BackDoor-AXJ.gen
    ... This is a Low-Profiled Threat Notice for BackDoor-AXJ.gen. ... detection will be added to the 4370 dat files ... For further information on the Risk Assessment and AVERT Recommended Actions ...
    (microsoft.public.security.virus)
  • AVERT Low-Profiled Threat Notice: W32/Buchon.gen@MM
    ... This is a Low-Profiled Threat Notice for W32/Buchon.gen@MM. ... W32/Buchon.gen@MM was first discovered on 10/21/2004 and detection will be added to the 4401 ... Though we consider this a low threat, AVERT has posted an extra.dat as part of the above ... For further information on the Risk Assessment and AVERT Recommended Actions please see: ...
    (microsoft.public.security.virus)
  • AVERT Low-Profiled Threat Notice: PERL/Santy.worm
    ... This is a Low-Profiled Threat Notice for PERL/Santy.worm. ... PERL/Santy.worm was first discovered on 12/21/2004 and detection will be added to the 4416 ... Though we consider this a low threat, AVERT has posted an extra.dat as part of the above ... For further information on the Risk Assessment and AVERT Recommended Actions please see: ...
    (microsoft.public.security.virus)