AW: Win32.Sircam.Worm Alert.....

From: Stefan Osterlitz (ostrlitz@blox.de)
Date: 07/30/01 

From: "Stefan Osterlitz" <ostrlitz@blox.de>
To: "'Meritt James'" <meritt_james@bah.com>, "'Juanita Fernando'" <jsscn@optushome.com.au>
Subject: AW: Win32.Sircam.Worm Alert.....
Date: Mon, 30 Jul 2001 12:50:00 +0200
Message-ID: <C5FEADB4FB3EE543959CE43DEE2ABE4E35CD@trendserver.blox.blox.ag>

Quite a few add the extension as a way of "hiding" what is going on, not
just Sircam. If you get an attachment with THREE groupings, assume it
is a 'bad thing' and act appropriately. Has anyone seen a three-group
attachment and it been ok?

.tar.gz ?

Stefan Osterlitz

Relevant Pages

  • Re: Win32.Sircam.Worm Alert.....
    ... > Quite a few add the extension as a way of "hiding" what is going on, ... > just Sircam. ... block all 'three-group' extension attachments if I anticipate that someone ...
    (Security-Basics)
  • File Recognizer
    ... Occasionally I receive files where someone has toyed with the extension, ... thus hiding what kind of file it truly is. ... Can anyone recommend a good file ... recognizer program that would identify a file's type by its contents? ...
    (microsoft.public.windowsxp.general)
  • Re: Compileing to diffrent file extensions
    ... > in hiding the user the fact that the file actually contains code that ... Just look at Windows Screen savers. ... .scr extension, but are nothing more than .dlls. ...
    (microsoft.public.dotnet.languages.vb)
  • Re: Firefox and cache
    ... But it's also not per file either - it is per extension, or per file type. ... Hiding the systems files is probably a good thing for many users.... ...
    (alt.html)