关于MYDOOM, ZIPPED exe f642004-02-03 22:29:00

1. They did changed icon of exe and scr.

2. there are quite a lot of files with names of xxxx.txt .scr and xxxxxx.txt .exe out of about 3000 mails of mydoom caught on my email server since 1/26

3. The forged icons do not work within a zip file, as you can see from the screenshots. It appears winzip ignores the embedded icon and displays the files according to windows default.

4. after unzip, the exe and pif show their forged icons but these home-made pics are of poor quality - see last pic.



--文学城www.wenxuecity.com--

事实胜于雄辩啊，呵呵