Re: ello! =))

[Peter Wood <peterw () firstbase co uk>]

I'm no expert either, but according to the Sophos site it looks like a 
Bagle worm. Interesting that it's using my address in the From field - I 
run Sophos up to date, and just for good measure,  I just ran their Bagle 
disinfector which says I don't have it. Any ideas, anyone?

Pete

At 17:15 15/04/2004 -0400, you wrote:
>I admin I'm no expert when it comes to virus examination, but the
>obfuscation used by this program seems more elaborate than normal.  Does
>anyone recognize this?
>
>-Rob
>
>----- Original Message -----
>From: <peterw () firstbase co uk>
>To: <dailydave () lists immunitysec com>
>Sent: Thursday, April 15, 2004 7:55 AM
>Subject: [Dailydave] ello! =))
>
>
>> I  don't  bite,  weah!
>>
>> password  for archive: 47546
>>
>
>
>----------------------------------------------------------------------------
>----
--------------------------------------------------------------------------------------------------------------------------------

Peter Wood FBCS CITP MIMIS MIEEE
Chief of Operations
First Base Technologies
+44 (0)1273 454525
www.fbtechies.co.uk
www.white-hats.co.uk

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://www.immunitysec.com/mailman/listinfo/dailydave