Summary

The worm previous identified as NetSky.AH and NetSky.AG has been renamed to Buchon. A closer look revealed that they have little in common.

The description for Buchon can be found from:

http://www.f-secure.com/v-descs/buchon.shtml

Additional Details

Detection

F-Secure AntiVirus detects W32/Buchon@mm with update 2004-10-21_03.

[FSAV_Database_Version]
Version=2004-10-21_03

Write-up: Mikko Hypponen, October 21st, 2004.

Updated: Ero Carrera, October 22nd, 2004.