The worm executable is packed with PeCompact v2
http://www.collakesoftware.com/PEC2.HTM
Packed: 15872 bytes
Unpacked 32Kb
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040502/95eb53a9/attachment.html