[prev in list] [next in list] [prev in thread] [next in thread] 

List:       dragonidsuser
Subject:    RE: [Dragonidsuser] MiMail.R (ie MyDOOM) -> MyDOOM.B??
From:       Michael Rash <mrash () enterasys ! com>
Date:       2004-01-29 15:36:52
Message-ID: 1075390612.1126.39.camel () isengard
[Download RAW message or body]


The current MyDOOM signature will most likely not detect the .B variant
since the payload has changed.  We are working on it...


On Thu, 2004-01-29 at 10:20, Clarke Morledge wrote:
> Do we know yet if the WORM:MYDOOM signature will also pick up the MyDoom.B
> variant recently found?  
> 
> http://www.f-secure.com/v-descs/mydoom_b.shtml
> 
> Or is it likely that the binary string could change?
> 
> WORM:MYDOOM works great at picking up the first MyDoom.  Thanks for the
> good work at Enterasys to get this out in a timely manner.
> 
> Clarke Morledge
> College of William and Mary
> Information Technology - Network Engineering
> Jones Hall (Room 18)
> Williamsburg VA 23187
> 757-221-1536
> chmorl@wm.edu
> 
> 
> _______________________________________________
> Dragonidsuser mailing list
> 
> For help please follow the below instructions.
> You can make subsciption adjustments via email by sending a message to:
> 
> Dragonidsuser-request@enterasys.com
> 
> with the word `help' in the subject or body (don't include the quotes), and you \
> will get back a message with instructions. 
> You must know your password to change your options (including changing the \
> password, itself) or to unsubscribe.   If you forget your password, don't worry, \
> you will receive a monthly reminder telling you what all your enterasys.com mailing \
> list passwords are, and how to unsubscribe or change your options.  

_______________________________________________
Dragonidsuser mailing list

For help please follow the below instructions.
You can make subsciption adjustments via email by sending a message to:

  Dragonidsuser-request@enterasys.com

with the word `help' in the subject or body (don't include the quotes), and you will \
get back a message with instructions.

You must know your password to change your options (including changing the password, \
itself) or to unsubscribe.   If you forget your password, don't worry, you will \
receive a monthly reminder telling you what all your enterasys.com mailing list \
passwords are, and how to unsubscribe or change your options.  


[prev in list] [next in list] [prev in thread] [next in thread]