Full Disclosure mailing list archives
Re: New Virus under way ...
From: Aschwin Wesselius <full-disclosure () illuminated nl>
Date: Thu, 18 Mar 2004 19:09:57 +0100
On Thu, 2004-03-18 at 18:21, Berend-Jan Wever wrote:
----- Original Message ----- From: "Schmehl, Paul L" <pauls () utdallas edu>Bagle.AA,AB,AC, etc. And on and on it goes, and where it ends, nobody knows.......It'll end when Bagle.AAAAAAAAAAAAAAA... hits a BoF in a virusscanner overwriting EIP with 0x41414141 ;)
Not sure, but wouldn't that be 0x41 0x41 0x41 0x41 ???? I'm not that good in hex, but I swear that I thought that you missed something.... ;) _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: New Virus under way ..., (continued)
- Re: New Virus under way ... Richard (Mar 18)
- Re: New Virus under way ... Nick FitzGerald (Mar 18)
- Re: New Virus under way ... Nick FitzGerald (Mar 18)
- Re[2]: New Virus under way ... Frederik Berger (Mar 18)
- Re: Re[2]: New Virus under way ... Michael Bemmerl (Mar 18)
- Re: Re[2]: New Virus under way ... Nick FitzGerald (Mar 18)
- Re[2]: New Virus under way ... Frederik Berger (Mar 18)
- Re: New Virus under way ... Richard (Mar 18)
- Re: New Virus probably Bagle.Q Rob, grandpa of Ryan, Trevor, Devon & Hannah (Mar 19)
- RE: Re[2]: New Virus under way ... SRH-Lists (Mar 18)
- RE: Re[2]: New Virus under way ... Schmehl, Paul L (Mar 18)
- Re: Re[2]: New Virus under way ... Berend-Jan Wever (Mar 18)
- Re: New Virus under way ... Aschwin Wesselius (Mar 18)
- RE: Re: New Virus under way ... Tech List (Mar 18)
- Re: Re[2]: New Virus under way ... Berend-Jan Wever (Mar 18)
- RE: Re[2]: New Virus under way ... Nick FitzGerald (Mar 18)
- Re: New Virus under way ... Paolo A. Gallenga (Mar 19)