G.W. Haywood wrote:
> Hello again,
> 
> On Wed, 17 May 2007 Dennis Peterson wrote:
> 
>>>> ... I also don't scan (or accept) most file formats declared unsafe
>>>> by Microsoft.
>>> How do you determine this?
>> From Microsoft's web page:
>> http://support.microsoft.com/default.aspx?scid=kb;EN-US;q262631
> 
> Um, aren't they just file extensions?  (You said formats. :)
> 
> I thought maybe you were using some sort of file magic.

If we're going to be precise, it would be file formats implied by file 
extensions. You can't block extensions (continuing to be precise just 
for you :) ) because they have no physical manifestation.

It would be nice if Microsoft had used "magic numbers" as found in other 
operating systems to simplify the identification of various file formats 
but they didn't so we do what we can with what they've given us and scan 
the rest. There's hours of entertaining reading about the problem here:

http://en.wikipedia.org/wiki/File_format

dp
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to