Re: [Full-Disclosure] Sober.I worm is here

[Danny <nocmonkey@xxxxxxxxx>]

On Fri, 19 Nov 2004 12:36:52 -0600, Todd Towles
<toddtowles@xxxxxxxxxxxxxxx> wrote:
> It arrives at .doc, .txt and .word?
> 
> Where are you seeing that?

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SOBER.I&VSect=T
 
>  It can't be very dangerous as a TEXT file. As far as I know it uses the
> normal "double extensions" tricks.

Right.

> Any good email filter should pick this up and you should be fine.

Exactly.

[...]

....D

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html