[35994] in bugtraq
Re: New MyDoom variant
daemon@ATHENA.MIT.EDU (Purple Pony)
Fri Aug 6 05:41:45 2004
Message-ID: <28917-78557@sneakemail.com>
Date: Thu, 05 Aug 2004 11:09:00 +1000
From: "Purple Pony" <kbgl5d702@sneakemail.com>
MIME-Version: 1.0
To: bugtraq@securityfocus.com
In-Reply-To: <411136A2.1080709@cornell.edu>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
Elliott C. Bäck wrote:
> According to Computer Associates:
>
> http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=39711
Computer Associates actually detect this as Win32.Evaman.C
http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=39772
as do McAfee & Symantec
Looking at the _appropriate_ descriptions CA, McAfee & Symantec all list:
.exe
-txt.exe
-htm.exe
-txt.scr
.zip
