[Esa-l] Magistr worm defanged but not caught

Brett Glass brett at lariat.org
Wed Aug 22 13:00:11 PDT 2001

At 01:46 PM 8/22/2001, John D. Hardin wrote:

>Brent, you have a sample. Can you give us a minimum size and a Base64
>signature like we have for Sircam?

I don't have enough samples of the worm to be able to tell
what varies from copy to copy. Do other folks on the list
have captured copies we can use for comparison? I'm hoping that 
there's something simple that's constant, such as the MIME boundary 


More information about the esd-l mailing list