Full Disclosure mailing list archives
Re: Sober.I worm is here
From: Danny <nocmonkey () gmail com>
Date: Fri, 19 Nov 2004 14:04:15 -0500
On Fri, 19 Nov 2004 12:36:52 -0600, Todd Towles <toddtowles () brookshires com> wrote:
It arrives at .doc, .txt and .word? Where are you seeing that?
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SOBER.I&VSect=T
It can't be very dangerous as a TEXT file. As far as I know it uses the normal "double extensions" tricks.
Right.
Any good email filter should pick this up and you should be fine.
Exactly. [...] ....D _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Sober.I worm is here etomcat (Nov 19)
- Re: Sober.I worm is here KF_lists (Nov 19)
- Re: Sober.I worm is here Danny (Nov 19)
- Re: Sober.I worm is here Valdis . Kletnieks (Nov 20)
- <Possible follow-ups>
- RE: Sober.I worm is here Todd Towles (Nov 19)
- Re: Sober.I worm is here Danny (Nov 19)
- RE: Sober.I worm is here Bowes, Ronald (EST) (Nov 19)
- Re: Sober.I worm is here Danny (Nov 20)
- Re: Sober.I worm is here KF_lists (Nov 19)