I created a couple of signatures using this string that matched in both files: 25 E5 6C D1 3C 2B 44 53 A8 34 B0 C1 14 3F E4 37
I'm monitoring ports 25, 135:139, 445, and 3127 with this signature to try and catch all methods of propagation.
----- Original Message -----
From: "Jason Brewer" <[EMAIL PROTECTED]>
To: "Full Disclosure" <[EMAIL PROTECTED]>
Sent: Tuesday, February 24, 2004 4:43 PM
Subject: [Full-Disclosure] MyDoom.f binary string
Does anyone have a binary string for MyDoom.f?
I wish to create a "network drive" signature ASAP.
Thanks!
Jason Brewer
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
