Today started again what seems to establish itself as the Monday run [1]
of user-frightening malware attachments, properly phrased German. The
last one is exactly one week ago, and they appear to start after office
hours. *sigh*
Given the recent report on this list of malware submissions, where parts
of the innocent wrapper mail ended up in the signatures, rather than the
attachment only...
Should I submit the entire, original email, or the attachment only?
Also, since no one answered my previous question: Samples checked by
virustotal are *not* automatically forwarded to you guys? Or are they?
guenther -- come on, this is just a nick
[1] Sorry, Robert, if you again don't get that wave. ;)
--
char *t="[EMAIL PROTECTED]";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
