[35969] in bugtraq
Re: New MyDoom variant
daemon@ATHENA.MIT.EDU (=?ISO-8859-1?Q?=22Elliott_C=2E_B=E)
Wed Aug 4 23:42:16 2004
Message-ID: <411136A2.1080709@cornell.edu>
Date: Wed, 04 Aug 2004 15:18:58 -0400
From: =?ISO-8859-1?Q?=22Elliott_C=2E_B=E4ck=22?= <ecb29@cornell.edu>
MIME-Version: 1.0
Cc: bugtraq@securityfocus.com
In-Reply-To: <001301c47a4d$ee039860$6500a8c0@paullaptop>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
According to Computer Associates:
"cmd
bat
com
exe
pif
scr
The attachment name may also be the e-mail address of the recipient.
The attachment could also be in a ZIP archive, and can have a "double
extension", with "doc", "txt", "htm" or "html" followed by many spaces,
then the real extension."
http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=39711
Elliott C. Bäck
------------------------------------------
http://www.elliottback.com
http://www.rso.cornell.edu/sevenspirits/
Paul Kurczaba wrote:
>What extension does the attachment have (exe, pif, zip)?
>
>-Paul
>----- Original Message -----
>From: <albatross@tim.it>
>To: <bugtraq@securityfocus.com>
>Sent: Wednesday, August 04, 2004 9:22 AM
>Subject: New MyDoom variant
>
>
>
>
>
>
>
>
>
