Hopefully the folks at IPswitch are working on an option to ban ALL
attachments.

The next wave will probably be to encrypt the virus-laden files, rename
it without the zip extension, and instruct the user to rename it first,
then unencrypt and unzip it and then run the infected payload.

And the sad thing is that somebody will be clueless enough to do it ;?)

D


> -----Original Message-----
> From: David Delbridge [mailto:[EMAIL PROTECTED]
> Sent: Thursday, March 04, 2004 3:26 PM
> To: [EMAIL PROTECTED]
> Subject: [IMail Forum] Bagle.J Question
> 
> Hi all,
> 
> I have banned ZIP files (Declude's VIRUS.CFG) and am instructing my
> customers, as a workaround, to rename any ZIP files prior to
attachment.
> 
> But this brings up a disturbing question:  What would prevent a virus
> from perpetrating the same workaround?  I mean, if Bagle.J can
instruct
> an individual to supply the necessary ZIP password, then it can also
> instruct the individual to rename a ".TXT," ".PDF" or
randomly-generated
> file extension to ".ZIP?"
> 
> It follows that banning solely by file extension would become moot,
> given that no particular extension could be trusted.
> 
> What do you think?
> 
> Dave
> 
> --
> 
> David M. Delbridge
> Circa 3000
> ColdFusion Hosting
> http://www.circa3k.com
> 866-CIRCA3K (247-2235)
> Outside U.S: +1.775-832-2445
> 
> 
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to