[SGVLUG] ack -- finally got "wormed" at work

[John Riehl]

Tom Emerson wrote:
> 
> [ironically, yesterday I wanted someone to send me a group of files so he used 
> winzip to package them up for me, but when his message arrived it was noted 
> as "quarantined" because the attachment HAD A VIRUS.  When he (and I) scanned 
> the file he created, it didn't turn anything up -- a call into the 
> 

I recently had a similar situation.  A summer hire, (a prof at a texas 
university) tried to email his syllabus et. al. (word documents)to his 
department before school started.  The av filter at the u kicked it 
back, as per heuristics.  i.e. it didnt match a particular signature, 
but something made it suspicious.  It turns out the names he chose 
triggered the heuristic filter.   He renamed the documents, and they 
went through.

There are many places that automatically filter based on attachment type.

jr
john riehl