[clamav-win32] common text in all (non-phish) virus, worms,…

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Rob McEwen
Date:  
To: clamav-win32
Subject: [clamav-win32] common text in all (non-phish) virus, worms, exploits
RE: common text in all (non-phish) virus, worms, exploits

QUESTION:

Would it be safe to say that the term "filename" and/or "iframe" is going to
always appear in plain text in ALL (non-phish) virus, worms, exploits?

This is certainly the case with several days' worth of "catches" from my
ClamAV runs. But I wonder if it is really always true?

Are there ever any exceptions to this rule? Or, can the word "filename"
and/or "iframe" ever hidden in Base64 encoded text?

Thanks!

Rob McEwen
PowerView Systems

(478) 475-9032


_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32