[Esa-l] Magistr worm defanged but not caught

[Brett Glass]

At 01:46 PM 8/22/2001, John D. Hardin wrote:

>Brent, you have a sample. Can you give us a minimum size and a Base64
>signature like we have for Sircam?

I don't have enough samples of the worm to be able to tell
what varies from copy to copy. Do other folks on the list
have captured copies we can use for comparison? I'm hoping that 
there's something simple that's constant, such as the MIME boundary 
string....

--Brett