Re: TB! V1.53 Beta/11 - virus warning
Hello Marck, On Sunday, June 03, 2001 at 8:29:12 PM you wrote: MDP Early versions of TB could be fooled by this under some MDP circumstance (I can't recall exactly what they were) I think the point were CR/LF in the filename ... this way TB! did not show the last extension ... But don't nail me on this ... it's only from my remeberance :-))) -- Regards Peter Palmreuthermailto:[EMAIL PROTECTED] Using The Bat! v1.53 RC/1 on Windows 98 4.90 Build 3000 (WindowsME) -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: TB! V1.53 Beta/11 - virus warning
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sunday June 3, 2001 at 9:29:13 AM, Jan Rifkinson wrote: I thought I read somewhere that some viri are now being spread via jpg or jpeg files; don't know if that's correct. But assuming itis, I noticed that these file types do *not* produce a TB! viruswarning. What are your thoughts on this? What do you mean by a TB! virus warning Jan? If I include *.JPG under Options/Preferences/Warnings/Always Display Warnings... Then whenever I attempt to open such a file, TB! indeed warns me about the possibility this particular file might contain a virus. Are you referring to something different? - -- Nick -=N.J. Andriash | Vancouver, B.C. Canada=- SecureBat! v1.53/iKey1000 | Win 98 SE | GnuPG v1.0.6 __ -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (MingW32) - GnuPGshell v1.77 Comment: [EMAIL PROTECTED] Comment: [EMAIL PROTECTED] iD8DBQE7GmpXxQKEdHuj/c4RAtKkAJwO01pOzOnRiKSUnTo24mc0yH8oqwCgp2Iv SRQ0CQHRy4iAZ6saLuxR/30= =Rof1 -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: TB! V1.53 Beta/11 - virus warning
Hello Jan, On Sun, 3 Jun 2001 12:29:13 -0400 GMT (04/06/2001, 00:29 +0800 GMT), Jan Rifkinson wrote: JRI thought I read somewhere that some viri are now being spread via JRjpg or jpeg files; don't know if that's correct. But assuming it JRis, I noticed that these file types do *not* produce a TB! virus JRwarning. What are your thoughts on this? I have not read this. Do you have a URL? *.jpg and *.jpeg files are just pictures with no executable code. Since you refer to a beta version (not allowed on this list ;-)), you can disable any file types under the new menu item Options / Preferences, if you want. If you use the virus-friendly Microsoft® products, a file called virus.jpg.pif or virus.jpg.vbs will by default be conveniently (for virus-spreaders) shown as if it were called virus.jpg - I think this is what was meant in the article you thought you read. rant Microsoft® calls this deception user-friendly. That must make us believe that their most important users are the people who want to spread viruses. I don't know why Microsoft® is allowed to continue distributing virus-friendly and home-user-unfriendly products. Do they know people in high places? /rant -- Cheers, Thomas. Moderator der deutschen The Bat! Beginner Liste. LOST: Male cat. Needs medication. Owner very worried, neutered and declawed. Message reply created with The Bat! 1.53 Beta/11 under Chinese Windows 98 4.10 Build 1998 using an Intel Celeron 366Mhz, 128MB RAM -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: TB! V1.53 Beta/11 - virus warning
Hello Jan, On Sunday, June 03, 2001 at 6:29:13 PM you wrote: JRI thought I read somewhere that some viri are now being spread via JRjpg or jpeg files; don't know if that's correct. But assuming it JRis, I noticed that these file types do *not* produce a TB! virus JRwarning. What are your thoughts on this? I may be wrong, but even as a technical there is no space on my imagination for Image-viri as I've NEVER seen any (not proprietary) image-format that contains executable code. So without executable code viri are impossible. What I cannot deny in general the the hypothetical possibility of viri in .psd or something else, because I don't know if there are informations stored in them formats that could contains executable code. AFAIR there also was a Bug in Netscape = 4.76 where a .gif image could contain javascript because of a bufferoverflow of Netscape, but this was not a .giv-virus as more a Netscape virus (and the hidden code was limited to JavaScript!!!) -- Regards Peter Palmreuthermailto:[EMAIL PROTECTED] Using The Bat! v1.53 Beta/11 on Windows 98 4.90 Build 3000 (WindowsME) -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
Re: TB! V1.53 Beta/11 - virus warning
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Jan, On 03 June 2001 at 12:29:13 -0400 (which was 17:29 where I live) Jan Rifkinson wrote to TBUDL and made these points: JR I thought I read somewhere that some viri are now being spread via JR jpg or jpeg files; don't know if that's correct. But assuming it JR is, I noticed that these file types do *not* produce a TB! virus JR warning. What are your thoughts on this? That this is a confused report about the attack which involved a file name x.jpg.scr, where the double extension was supposed to mask the fact that the file was a trojan script and not the innocent jpg it seemed to be. Early versions of TB could be fooled by this under some circumstance (I can't recall exactly what they were), but that loophole has long been plugged. - -- Cheers -- .\\arck D. Pearlstone -- List moderator and fellow end user ~~~ \ BrainStorm - free thinking - www: http://www.brainstormsw.com / \ PGP Key ID: 0x929DCDA0 | www: http://www.silverstones.com / SB! v1.53/iKey1000( 55238-48F0B) on Windows NT 5.0.2195 Service Pack 1 -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (MingW32) Comment: GPG Sealed for freshness iD8DBQE7GoH4OeQkq5KdzaARAlj1AJ9VUbzxUNo1ltVnLqyaXkqtDYrxkgCdHcxh Ha1VNeDvFzarH1S9a43OeJI= =EGs/ -END PGP SIGNATURE- -- __ Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Unsubscribe: mailto:[EMAIL PROTECTED] You are subscribed as : archive@jab.org
