North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: uuencoded Love Worm variant

  • From: Roeland Meyer (E-mail)
  • Date: Fri May 05 15:02:57 2000

most modern mailers wil automagically uudecode.

> -----Original Message-----
> From: [email protected] [mailto:[email protected]]On Behalf Of
> Bennett Todd
> Sent: Friday, May 05, 2000 11:19 AM
> To: Eric Conrad
> Cc: [email protected]
> Subject: Re: uuencoded Love Worm variant
> 
> 
> 2000-05-05-13:44:16 Eric Conrad:
> > I caught one of these uuencoded 'in the wild'.  It would have
> > slipped through my filters if not for the standard Subject: line.
> 
> Does anyone know for sure that the uuencoded version isn't actually
> devenomed by the uuencoding? I.e. is there any known gateway that
> will turn the uuencoded attachment back into the known-virulent
> MIME, or any known MUA that will offer to execute the uuencoded
> script with a simple click? If the user has to go out of their way
> to expressly decode the thing into a file, then deliberately execute
> that file, that varient of the worm won't spread like wildfire; I'm
> content to let it pass.
> 
> -Bennett
>