[Dshield] How Nimda writer sent it?

sasa s compu81baby at yahoo.com
Thu Mar 6 23:12:16 GMT 2003

How can any worm writer (as the Nimda writer) send his worm through mail client?

i.e. as for Nimda:

(If the Nimda sender was using his hotmail account 2 send his worm)

the attachment is an exe 

Content-Type : audio /x- wav;
name = "readme. exe"

did he use the "add attachment" button 2 attach his exe? 
if so then how did the writer make it seem to be "x-wav"?
Did he use ordinary mail client ?
or how did he send the Nimda?


Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, and more

More information about the list mailing list