OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Laura A. Robinson (lrobinsonintellimark-it.com)
Date: Tue Jul 17 2001 - 11:15:15 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    As I mentioned, the file I sent *was* zipped. The title of the file was
    "ChangeVBSBehavior.zip", so apparently *any* instance of the letters "vbs"
    is triggering these virus scanners.

    Laura Robinson
    ----- Original Message -----
    From: "Peter Meister" <petermeimicrosoft.com>
    To: "Ben Greenbaum" <bgreenbaumsecurityfocus.com>;
    <focus-mssecurityfocus.com>
    Sent: Monday, July 16, 2001 8:42 PM
    Subject: RE: Your Virus Protection Programs

    While it may bother certain people, I personally think bouncing is great
    because it informs the sender of the error of there ways. Also, there
    are ways around this as we all know, IE , change the extension or zip
    it! So if its an important file, and to save all of us time in receiving
    it, compress it and then send it...

    Just my .02 cents ....

    -Peter

    -----Original Message-----
    From: Ben Greenbaum [mailto:bgreenbaumsecurityfocus.com]
    Sent: Monday, July 16, 2001 8:27 PM
    To: focus-mssecurityfocus.com
    Subject: Re: Your Virus Protection Programs

    I would just like to point out that "working very well" is a relative
    assessment, and furthermore is not neccessarily shared by the moderator
    of
    this list :P

    C'mon people, we all know that there are better solutions than bouncing
    every VBS attachment and emailing the sender.

    Ben Greenbaum
    Focus-MS Moderator

    On Mon, 16 Jul 2001, Laura A. Robinson wrote:

    > All of your virus protection programs are working very well, if the
    couple
    > hundred quarantine/deletion/warning messages I've received since I
    doinked
    > and sent that .vbs file are any indication. :-)
    >
    > Laura A. Robinson
    > Technical Instructor/Consultant
    > MCT, MCSE, CLI, PCLP
    > IntelliMark Pennsylvania Division
    > http://www.intellimark-it.com
    > lrobinsonintellimark-it.com
    >