On Sun, 5 May 2002, Michael Disabato wrote: > Sunday, May 5, 2002, 1:55:34 PM, Jonathan scribbled: > > JA> On Sun, 5 May 2002, Michael Kellogg wrote: > > >> For some reason I have been getting emails - no doubt viruses - from > >> people I don't even know, with 3 attachments: One is an almost-blank > >> HTML file, one is some decoy file, like a jpg or Word doc, and one is > >> a ".zl?" file, where "?" = 3 or 9 usually. > > JA> I'd check your virus scanner... chances are, that'd be Klez... it uses > JA> HTML code to force Outlook/Outlook Express to run the code. Fortunately > JA> for us, TB! doesnt' understand most of that code ;) > > Actually, if you're running Zone Alarm, that's what is changing the > extension. MailSafe has a list of extensions that it renames to .z?? > to prevent them from executing. > > Mike
I realised ZA was involved shortly after I posted my message... I've not used it in a while. I just stick to ipchains/iptables as my firewall. And my OS isn't subject to the affects of 99% of viruses that flying about. It'd drive me up the wall if my firewall started renaming files for me. I can see the point of the facility for some computer users that have a habbit of double clicking on an attachment (goner virus at our work for example). -- Jonathan Angliss ([EMAIL PROTECTED]) The Versatile Group Tel: 972 991 1370 x 205 ________________________________________________________ Current Ver: 1.60i FAQ : http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Bug Reports: https://bt.ritlabs.com
