To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- On January 22, Symantec announced a "new" bot it referred to as W32.Gangbot (info here: http://www.symantec.com/security_response/writeup.jsp?docid=2007-012210-3042-99). In trying to find additional information about it, I have not really found anything further than reprints of the Symantec report. I did however stumble across a Computer Associates writeup on Duiskbot.AE (info here: http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?ID=60255) which looks very similar.
Can anyone out there tell me if these two are the same or point me to someone who can help me out? To date, I have been unable to obtain a specimen of Duiskbot.AE to figure out if Symantec will detect Duiskbot.AE as W32.Gangbot. That is the actual question I am trying to answer. Any assistance appreciated. ~DN _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
