[Esa-l]Here's a new one....

[Murray Crane]

Brett
Yes.  It's pretty new.  F-Secure call it VBSWG.X or 'homepage'. See http://www.f-secure.com/v-descs/vbswg_x.shtml if you care to.  F-Secure released a signature update this 
morning that detects it, but I didn't find that out until after the sanitizer had caught *five* copies of it...
F-Secure say it's propagating quicker than AnnaK, and I'm inclined to believe them.
Murray Crane
Sysadmin - Longbridge International Plc
On Wed, 09 May 2001 09:20:17 -0600, Brett Glass wrote:

>Here's a Trojan I've never seen before.... Both our own ruleset
>and John's sanitizer triggered on it (output from John's is shown). 
>It looks to have been generated by the same toolkit that was used 
>to create the Anna Kournikova worm.