Storm and Kraken Botnet detection

Avast Free Antivirus / Premium Security
1

I was just reading an article on Slashdot about the Storm and Kraken botnets. The article says that Kraken is undetectable in over 80% of the machines running antivirus software. They think that the malware appears as an image to users, but with a .exe extension that is hidden.

I’m curious to know if Avast! can detect either the Storm or the Kraken malware. Do any of you know?

Thanks!
John

2

I have heard about this one also. As a user of AVAST, does AVAST detect this botnet? Please give us an update.

3

Hi Nightwalker097,

This whole story can now be downplayed considerably:
http://www.sophos.com/security/blog/2008/02/1057.html
Of course there will be victims, but the whole story was hyped for PR purposes by securityfirm Damballa.
Just like with MayDay this story has been blown up out of proportions as Sophos and other AV-vendors detect this:
Bobax
Estimated # of bots: 185,000
Alternate names: Bobic, Oderoor, Cotmonger, Hacktool.Spammer, Kraken
SMTP engine: Template-based
Total botnet spam-sending capacity: 9 billion spams/day
Control: encrypted, TCP port 447
Rootkit-enabled: No
Identifying strings: cCdipsuxX%, w:\projects\b3\release\core.pdb
Notes: Despite reports of its demise, Bobax continues to be a strong player in the spam arena. At one time, Bobax was solidly in the business of sending mortgage spam, but lately has been seen mailing low-interest loan spam.

Now you have all the relevant facts,

polonus

4

But does AVAST detect this virus? If so then I have no worries. Kraken is the botnet I am talking about in particular.

5

I think u have to use antibot programs for defend botnet attacks.

for example norton antibot,trend micro RUbotted,Comodo Boclean etc…

6

Hi savarona,

I have Micro RUBotted installed, and Comodo BoClean 4.25 as well, and some good rootkit detectors as IceSword etc. See the top ten bot nets here: http://www.secureworks.com/research/threats/topbotnets/?threat=topbotnets
And here is what you can do, the best bot detection methods:
http://searchsecurity.techtarget.com/expert/KnowledgebaseAnswer/0,289625,sid14_gci1278377,00.html

polonus