Full Disclosure mailing list archives

Re: Sober.I worm is here


From: Danny <nocmonkey () gmail com>
Date: Fri, 19 Nov 2004 14:04:15 -0500

On Fri, 19 Nov 2004 12:36:52 -0600, Todd Towles
<toddtowles () brookshires com> wrote:
It arrives at .doc, .txt and .word?

Where are you seeing that?

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SOBER.I&VSect=T
 
 It can't be very dangerous as a TEXT file. As far as I know it uses the
normal "double extensions" tricks.

Right.

Any good email filter should pick this up and you should be fine.

Exactly.

[...]

....D

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: