According to Computer Associates:

"cmd
bat
com
exe
pif
scr

The attachment name may also be the e-mail address of the recipient.

The attachment could also be in a ZIP archive, and can have a "double
extension", with "doc", "txt", "htm" or "html" followed by many spaces,
then the real extension."

http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=39711

Elliott C. Bäck
------------------------------------------
http://www.elliottback.com
http://www.rso.cornell.edu/sevenspirits/

Paul Kurczaba wrote:

>What extension does the attachment have (exe, pif, zip)?
>
>-Paul
>----- Original Message -----
>From: <albatross (at) tim (dot) it [email concealed]>
>To: <bugtraq (at) securityfocus (dot) com [email concealed]>
>Sent: Wednesday, August 04, 2004 9:22 AM
>Subject: New MyDoom variant
>
>
>
>
>
>
>
>
>

[ reply ]