Re: Win32.Sircam.Worm Alert.....

From: Anthony Carnemolla (anthonyc@mdolblk.com)
Date: 07/30/01 

From: Anthony Carnemolla <anthonyc@mdolblk.com>
To: SECURITY-BASICS@securityfocus.com
Subject: Re: Win32.Sircam.Worm Alert.....
Date: Mon, 30 Jul 2001 10:27:11 -0700
Message-Id: <01073010271100.06100@hagbard>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Friday 27 July 2001 09:15, Meritt James wrote:
> Quite a few add the extension as a way of "hiding" what is going on, not
> just Sircam. If you get an attachment with THREE groupings, assume it
> is a 'bad thing' and act appropriately. Has anyone seen a three-group
> attachment and it been ok?

Yes. Other operating systems use a '.' in different ways. I would not want to
block all 'three-group' extension attachments if I anticipate that someone
might for example send me a "file.tar.gz".

> V/R
>
> Jim

- --
- -Anthony Carnemolla
 System Administrator, MD On-Line

GPG public key available on request
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjtlmPoACgkQ+CuKd58LPcn6UwCfehecu6QJUy/DpksEKtZ+MxIe
f0EAn2my7Fge9JJa2FD769b3gCavnBd2
=VBiv
-----END PGP SIGNATURE-----

Relevant Pages

  • AW: Win32.Sircam.Worm Alert.....
    ... Quite a few add the extension as a way of "hiding" what is going on, ... just Sircam. ... Has anyone seen a three-group ...
    (Security-Basics)
  • File Recognizer
    ... Occasionally I receive files where someone has toyed with the extension, ... thus hiding what kind of file it truly is. ... Can anyone recommend a good file ... recognizer program that would identify a file's type by its contents? ...
    (microsoft.public.windowsxp.general)
  • Re: Compileing to diffrent file extensions
    ... > in hiding the user the fact that the file actually contains code that ... Just look at Windows Screen savers. ... .scr extension, but are nothing more than .dlls. ...
    (microsoft.public.dotnet.languages.vb)
  • Re: Firefox and cache
    ... But it's also not per file either - it is per extension, or per file type. ... Hiding the systems files is probably a good thing for many users.... ...
    (alt.html)