Virus information

There are a lot of viruses passed around through the Internet and also via disk exchanges. Of course the internet can be a little more dangerous as viruses can propogate themselves faster.

Symantic and Mcafee makers of virus software have a good sites to go to if you need information about hoaxes and viruses at:

http://www.symantec.com/avcenter/

http://www.mcafee.com/

Also look at the following article:

Outlook express and viruses.

New viruses are coming up that have lot of different file types and are sent out in multiple forms. As a result we are implimenting a new set of virus filters to email (Nov 15, 2004).

Checks all files in zip and rar attachments as well as regular attachments. It also blocks zip files containing zip files containing blocked file types, blocks attachments with names ending in .zip that are not zip files, has improved base64 decoding, and checks the first file of a .rar archive.

Blocks .bat, .cmd, .com, .cpl, .exe, .lnk, .pif, .scr, .vbs, .vbe, .vb, .ws, .wsc, .wsf,.msi, .hta, .dll, .reg, .jse, .bas, .chm, .cmd, .scf, .sct, .xsl and .zip and .rar files containing these attachments.

The Error message is:

"Banned Attachment: Security policy violation. Use gzip to compress the file as an attachment for mailing its final recipients."

Also included ia a filter (MSLevel-1) based upon http://www.microsoft.com/office/ork/2003/three/ch12/OutG07.htm

which blocks:

.ade, .adp, .app, .bas, .bat, .chm, .cmd, .com, .cpl, .crt, .csh, .exe, .fxp, .hlp, .hta, .inf, .ins, .isp, .js, .jse, .ksh, .lnk, .mda, .mdb, .mde, .mdt, .mdw, .mdz, .msc, .msi, .msp, .mst, .ops, .pcd, .pif, .prf, .prg, .reg, .scf, .scr, .sct, .shb, .shs, .url, .vb, .vbe, .vbs, .wsc, .wsf, .wsh, .xsl

Many of the above extensions have been used recently in the worm type viruses and can take over control of your computer

Route Address Filter - Commonly used to relay spam thru other servers - This filter will bounce any recipient that has a % or ! in it, or starts with an @

Please note that the above extension blocking may at times block emails being sent that have a valid attachments with extensions with these endings. If someone wants to send you a file with one of these extensions, they will have to package it in a gzip file or some other compressed form and tell you how to open it. This at times will prevent you from receiving files that have some type of web page pointer attached to it. But now opening some web pages can infect your system. I feel it may be better to be safe and not sorry and have a little extra inconvenience of dealing with a virus filter in email. Ask any of your friends who lately had to deal with a virus!

Eden Recor
Grand County Internet Services