Peter Ferrie, Heather Shannon
Virus Bulletin, May 2005, pp. 7-11
ISSN 0956-9979
May 2005
Download PDF (30.27Kb) (You need to be registered on forum)It was a Tuesday and it was sunny outside, but I was inside waiting for my email client to finish retrieving messages. It was stuck on one mail that had a huge attachment: a sample of W32/Zellome.
W32/Zellome arrives as an email attachment. It seems to exist only to demonstrate its polymorphic engine, since the worm component is messy and platform-dependent.