Full Disclosure mailing list archives
RE: Mydoom
From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Wed, 28 Jan 2004 20:14:15 +1300
"Remko Lodder" <remko () elvandar org> to me:
even if it was a prefixed size. one 'creative CRACKER or other lame person' would change the virus with a single bit which makes it a bit larger, and all the previous detects are USELESS , eventhough it perhaps has the same sig as before
Did you read what I wrote? Did you read the comment to go back and read what I haave already written earlier in our discussions of this virus, specifically about its filesize and detection indeterminacy based on anything filesize- sensitive? Please do so and stop wasting our time by repeating what has already been better siad by others... Regards, Nick FitzGerald _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- RE: Mydoom, (continued)
- RE: Mydoom Nick FitzGerald (Jan 27)
- RE: Mydoom madsaxon (Jan 27)
- RE: Mydoom Nick FitzGerald (Jan 27)
- RE: Mydoom Nick FitzGerald (Jan 27)
- Re: Mydoom Brent J. Nordquist (Jan 27)
- Re: Mydoom Vlad Galu (Jan 27)
- Re: Mydoom Nick FitzGerald (Jan 27)
- Re: Mydoom Geoincidents (Jan 27)
- Re: Mydoom Nick FitzGerald (Jan 27)
- Re: Mydoom Rob, grandpa of Ryan, Trevor, Devon & Hannah (Jan 28)
- Re: Mydoom Tal Kelrich (Jan 29)
- RE: Mydoom Remko Lodder (Jan 27)
- RE: Mydoom Nick FitzGerald (Jan 28)