Re: New MyDoom variant

["Elliott C. Bäck" <ecb29 () cornell edu>]

 According to Computer Associates:

"cmd
bat
com
exe
pif
scr

The attachment name may also be the e-mail address of the  recipient.

The attachment could also be in a ZIP archive, and can have a "double 
extension", with "doc", "txt", "htm" or "html" followed by many spaces, 
then the real extension."

http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=39711

Elliott C. Bäck
------------------------------------------
http://www.elliottback.com
http://www.rso.cornell.edu/sevenspirits/


Paul Kurczaba wrote:

> What extension does the attachment have (exe, pif, zip)?
>
> -Paul
> ----- Original Message ----- 
> From: <albatross () tim it>
> To: <bugtraq () securityfocus com>
> Sent: Wednesday, August 04, 2004 9:22 AM
> Subject: New MyDoom variant
>  
>
>  
>
>
>
>
>