procmail
[Top] [All Lists]

RE: virus recipe for MyDoom

2004-01-27 08:41:57

John Connover wrote:

BTW, the series beginning with ^T is the Microsoft executable
loader/header information in base64; the UEsD is the PK zip signature
in base64. See /usr/share/misc/signature for particulars, and covert
the first characters to base64 as per RFC1521 where 3 bytes are mapped
into 4 printable characters.


John, is '/usr/share/misc/signature' associated with a particular Unix
utility? That file isn't installed in my RH 9.0 configuration.


_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail

<Prev in Thread] Current Thread [Next in Thread>