QUOTE
Notice
This is a Low-Profiled Threat Notice for Linux/Psybot

Justification
Linux/Psybot has been deemed Low-Profiled due to media attention at http://www.theregister.co.uk/2009/03/24/ps...etworking_worm/.

Linux/Psybot is referred to as "The "psyb0t" worm" in the article at theregister.co.uk.

Read About It
Information about Linux/Psybot is located on VIL at: http://vil.nai.com/vil/content/v_154392.htm

Detection
Linux/Psybot was first discovered on March 24, 2009 and detection will be added to the 5564 dat files (Release Date: March 25, 2009).

Though we consider this a low threat, An EXTRA.DAT file may be downloaded via the McAfee AVERT Extra.dat Request Page: https://www.webimmune.net/extra/getextra.aspx

If you suspect you have Linux/Psybot, please submit a sample to http://www.webimmune.net