Re: stealth executables

[asoto () INAME COM (Adolfo Soto)]

On Wed, 27 Oct 1999, Brad Griffin wrote:

> Hi all.
> I was reading a mainstream newsletter a couple of days ago which had
> the following article. Forgive me if it is common knowledge (it was a
> new one for me).

I guess this is quite the same that the bug reported at:
http://www.kriptopolis.com/boletin/0138.txt

Spanish only sorry. This bug (reported to MS before September) allows
to hide an executable in a new extension type. So don't double-click
anything just because it ends in "thx" i.ex. :-)

> The Danger Of Stealth Executables
>
> "SHS" and other little-known or seemingly-benign file types
> (often completely ignored by antivirus apps) can disguise
> malicious executables and macro viruses!
>
> A reader from Canada, recently had an eye-
> opening experience that's instructive to us all:
[...snip..]


--
Adolfo Soto
-Subscriber of The Boulder Pledge -
PGP mail welcome.
Fingerprint: BD 12 A9 E2 0D 63 23 6F 88 D9 3E 32 20 F1 57 84