Re: virus in blob file

From: Riccardo (Riccardo_at_discussions.microsoft.com)
Date: 12/13/04 

Date: Mon, 13 Dec 2004 05:41:01 -0800

Dear John,

I'd like to evitate to write in the file system a potetially dangerous file.

1. if i don't use a method to prevent the virus attach by means of uploaded
files, the server is sure, because the virus is stored in the DB, and so it's
not able to attack the system. On the other side, the client that downlaods
an uploaded infected file can be infected. So this solution is sure for the
server, but not for the client.

2. If I uses your solution, I've to write a potentially dangerous file in
the File System. Two problem:
 2a. performance
 2b. If the virus is newer than the virus definition in the antivirus, I can
write in the file system a dangerous file....
This solution in good for the client, but not enought for the server.

What do you think about?

Thanks,
Riccardo.

"John Bell" wrote:

> Hi
>
> If the are uploaded then they must be materialised on the webserver or
> database server, therefore they can be scanned before importing.
>
> John
>
> "Riccardo" <Riccardo@discussions.microsoft.com> wrote in message
> news:6AC90389-C8CB-4834-B0E0-4AD8BFF57DBD@microsoft.com...
> > Hi!
> >
> > I'm developing a three tired application based on .NET and SQLServer. I
> > use
> > SQL SErver2000 to store files uploaded by user by means of a web based
> > ASP.NET application.
> > How can I prevent the upload of infected files in the DB? Does it exist an
> > antivirus that can scan the files stored in the BLOB files of the DB?
> > Install a virus wall in a proxy is the only one solution for preventing
> > virus upload and download?
> >
> > Thanks,
> > Riccardo
>
>
>

Relevant Pages

  • windows wont start
    ... What type of file system? ... Goto www.sysinternals.com and get NTFSDOS. ... >using an OEM comp and am not using my original discs? ... All virus scans ...
    (microsoft.public.windowsxp.general)
  • Re: File Upload Question
    ... The user can certainly upload a file with a virus etc in it, ... Can you lock the file types or mime types down to restrict certain ... For one of our clients we only allow registered users to upload and we ... "magic bucket" quarantine system which sometimes means documents are ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: And 45 days after I sent the worm to AVAST
    ... | The csrcs.exe file is what the virus becomes when it is ... | command so you cannot see it in a browser, ... | If your virus is NOT what I uploaded, ... Funny thing is they are running Avira ...
    (alt.comp.anti-virus)
  • XP randomly restarts on me
    ... I got rid of the virus and everything started ... >I'm experiencing these unexplained crashes in XP, ... >kind of crash where you get to close the frozen program ... >check the file system on my C drive for errors. ...
    (microsoft.public.windowsxp.general)
  • Re: total system freeze - where to look for more information
    ... Haven't had an opportunity to try with NFS yet, but given that this is related to WIndows file system semantics, that probably wouldn't help. ... If your virus checker can be set to ignore the folder where you dump to, ... a working samba folder I see smooth file growth, on a non-working it's obviously erratic until it times out. ...
    (freebsd-questions)