[ale] anti-virus and mozilla

Christopher Bergeron christopher at bergeron.com
Tue Feb 18 23:04:05 EST 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Wouldn't it be wiser to just send a garbage file over with a virus 
"signature" in it?  If I'm not mistaken a certain series of sequential 
bytes will trigger the virus scanner.  Unfortunately, I have no links, 
but a quick search for virus signatures might produce some good leads 
for ya.

regards,
- -CB



James P. Kinney III wrote:

|And I found a link with some good directions on using that pop3
|emulator.
|http://mozilla.gunnars.net/mozfaq_use.html
|
|Basically point the Mozmail to the pop3 emulator and setup norton to do
|the equivalent of fetchmail.
|
|Now to dig up some relatively benign bug to <shudder> send through the
|email and test.</shudder>
|
|On Tue, 2003-02-18 at 21:57, Jonathan Rickman wrote:
|
|>Later versions of NAV have a built in POP3 proxy implementation that scans
|>the incoming email before it hits the MUA. Not sure about specific MUA
|>compatability but NAV usually will not trip over a name. It looks at the
|>sig. It *might* not work with Moz, but it will detect a virus once the
|>user tries to access the attachment. The Real Time engine will pick up the
|>virus in the temp file, most of the time as soon as it's written (in most
|>MUAs this is immediately after receipt).
|>
|>--
|>Jonathan Rickman
|>X Corps Security
|>http://www.xcorps.net
|>
|>_______________________________________________
|>Ale mailing list
|>Ale at ale.org
|>http://www.ale.org/mailman/listinfo/ale


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iD8DBQE+UwIzTKCy0t3zQgURAoPPAKCCYjUuvZoUPZw9vBqLKjX8ZAQuMQCgvASt
LWLt1qOTGDEs7tIDsbvPuU8=
=aJLh
-----END PGP SIGNATURE-----


_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale






More information about the Ale mailing list