RE: A worm...

["Phillip A Jaeger" <phillip.jaeger () athletics utexas edu>]

This is w32.sobig.e.
New worm today.
Symantec's info at:
http://securityresponse.symantec.com/avcenter/venc/data/w32.sobig.e () mm html

Phillip

-----Original Message-----
From: full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com] On Behalf Of ATD
Sent: Wednesday, June 25, 2003 17:53
To: full-disclosure () lists netsys com
Subject: [Full-disclosure] A worm...

.pif being .zip, is this new? 

cute virus/worm.

I know what it is, but since when did the pif worm start zipping itself?
did I miss something?


[darf] ~/virus> unzip your_details.zip 
Archive:  your_details.zip
  inflating: details.pif             
[darf] ~/virus> ls
details.pif  your_details.zip
[darf] ~/virus> 


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html