Hello all; It should be noted that the attachment below has a .com extension. I too received a disabled (truncated) copy of this worm on today 7/25/01 however the attached file had a .pif extension. I suspect this worm alters extensions as well, I am sure (and hope) someone will post a dissection of this worm to the list after they receive a full copy. Eric Williams, Pres. Information Brokers, Inc. Phone: +1 202.889.4395 http://www.infobro.com/ Fax: +1 202.889.4396 mailto:ericat_private For More Info: infoat_private PGP Public Key http://new.infobro.com/KeyServ/EricDWilliams.asc Finger Print: 1055 8AED 9783 2378 73EF 7B19 0544 A590 FF65 B789 On Tuesday, July 24, 2001 11:14 AM, Martin Lindquist [SMTP:martinat_private] wrote: 8<snip----- > I don't know much spanish, but it looks to me as a direct translation of > the english version. Subject line was "WOWWWWWWWW" and the attached > (suspected evil) file is named "WOWWWWWWWW.doc.com". > > / Martin Lindquist > 8<snip---- > -- > email:marineat_private > email:martinat_private > phone:+46-70-490 79 03
This archive was generated by hypermail 2b30 : Wed Jul 25 2001 - 10:05:59 PDT