According to Computer Associates:
"cmd bat com exe pif scr
The attachment name may also be the e-mail address of the recipient.
The attachment could also be in a ZIP archive, and can have a "double extension", with "doc", "txt", "htm" or "html" followed by many spaces, then the real extension."
http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=39711
Elliott C. Bäck ------------------------------------------ http://www.elliottback.com http://www.rso.cornell.edu/sevenspirits/
Paul Kurczaba wrote:
What extension does the attachment have (exe, pif, zip)?
-Paul
----- Original Message ----- From: <albatross@xxxxxx>
To: <bugtraq@xxxxxxxxxxxxxxxxx>
Sent: Wednesday, August 04, 2004 9:22 AM
Subject: New MyDoom variant