North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Possibly yet another MS mail worm

  • From: Michael Wiacek
  • Date: Sun Feb 29 21:19:07 2004 
I believe the point is, your mail scanner should be able to
scan something as simple as zip compressed attachments. If
it can't, you may want to rethink which program you use.
Most open source and commercial scanners can scan inside zip
files.

mike

On Sat, 28 Feb 2004, Rubens Kuhl Jr. wrote:

>
> > It's annoying how easily these things spread even though they don't rely
> on
> > a specific OS vulnerabililty -- hell, it's an executable *in a zipfile*,
> so
> > it requires opening the zipfile and then running the program inside it.
> Of
> > course everyone will run it, even though it's named dygfwefuih.exe (random
> > characters before .exe).  <grumble>
>
> Being in a zipfile is exactly why these things work: most mail systems
> nowadays drop executable attachments without mercy, but a zipfile may be a
> compressed document. Not every mail system screen incoming messages with
> anti-virus.
>
> People writing this worms don't know just a bit about human behaviour, they
> seem to keep up with trends in mail systems administration as well.
>
>
> Rubens
>
>
>
>
>
> !DSPAM:404137ae74191246918873!
>
>