[Dshield] Password protected Bagle.F

Jon R. Kibler Jon.Kibler at aset.com
Mon Mar 1 20:32:32 GMT 2004


John Hardin wrote:
> 
> On Mon, 2004-03-01 at 09:53, Jon R. Kibler wrote:
> > According to a thread on the ClamAV users lists, Bagle.F is now
> > spreading via password protected zip file. The text body of the
> > email contains the password.
> 
> Fortunately password-protecting a ZIP file does NOT encrypt the
> zipfile's index - you can still see (and scan for) the archived
> filenames without having the password.
> 

Which doesn't help if the file name is random.
JK
--
Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC  USA
(843) 849-8214




==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.



More information about the list mailing list