Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Has anyone seen this in their e-mail
From: Nick FitzGerald <nick () virus-l demon co uk>
Date: Thu, 11 Mar 2004 00:40:53 +1300

Aschwin Wesselius <full-disclosure () illuminated nl> wrote:

...  I bet it is a Bagle.Gen-zippwd (who gives them names
actually?) sort of worm, but am not sure. 

That is a heuristic detection -- I could easily make hundreds of .ZIPs 
containing copies of notepad.exe or similar that would be (mis-) 
detected as that.

Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]