[Esa-l] Magistr worm defanged but not caught

[Brett Glass]

Darn. Looks like the file names are random and the MIME
boundary string isn't constant. Will have to try to pull
a hex string out of the body of the worm.

--Brett

At 02:55 PM 8/22/2001, Floyd Pierce wrote:
  

>I have one for you if you want.....
>Mime boundary:
>>-----=_NextPart_000_00BA_01AC2B89.073B89A0
>>Content-Type: application/octet-stream; name="OEMRNCE.23798DEFANGED-EXE"
>>Content-Transfer-Encoding: base64
>
>--
>Floyd Pierce              | Director of Information Technology
>Phone  847-790-2830 (IL)  | Box USA
>Phone  817-783-2355 (TX)  | floydp at boxusa.com
>Fax    847-790-2880       | floyd at floydbob.com