But theoretically some script kiddy can send two files to his victim: - a Virus/Trojan with renamed extension (.txt) - a small script or program that never will e identified as a malicuos code.
Now the victim will launch the second programm (you know there are more then enough people doing this) And this easily can rename the first file an launch this one. I know the SKIPEXT can be very usefull on high-traffic-systems, but i think if your server has enough resources it will be much better to scan all files. Markus > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry > Sent: Thursday, April 25, 2002 7:50 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] Virus Not Detected > > > > >I am using Declude Virus v1.46 with McAfee 6.0 with data > files dated the > >17th of this month. > > > >Some Hi How are you viruses are allowed through if the > attachment is a .txt > >file. Shouldn't my setup catch these as well? Is anyone else > having this > >same issue? > > That depends on your setup. The default settings include > "SKIPEXT TXT", so > that Declude Virus won't scan .txt files. Since .txt files > can't contain > an executable virus, there is nothing to worry about. If you > would like > .txt files scanned, you can remove the "SKIPEXT TXT" line from the > virus.cfg file. > -Scott > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
