Security Basics mailing list archives

RE: 543.rar attachment


From: "Sean Crawford" <sean01 () accnet com au>
Date: Wed, 9 Mar 2005 13:39:18 +1100



---> -----Original Message-----
---> From: adisegna () siscocorp com [mailto:adisegna () siscocorp com]

---> Subject: RE: 543.rar attachment


---> I just recently got the same executable inside .rar. I extracted the
---> dddd.exe and ran a scan on it. Norton Corporate 9.01 didn't find
---> anything (as of 4 days ago). I wasn't about to double click this exe on
---> my corporate network. Block the rar extension on your mail server.
--->

rar is a valid compression format...blocking it isn't a very good solution.

2 cents.

Sean


Current thread: