[Esd-l] Klez@ worm/virus

Andy Feldt feldt at nhn.ou.edu
Fri Apr 19 06:51:01 PDT 2002


You wrote:

> I keep seeing these worms being announced, and I keep thinking about
> my default-secure stance, and I keep thinking that I'm going to drop
> *.exe into the recommended poison list on principle.
> How badly would this annoy people?
> I suppose I could maintain two lists, one with the .exe filenames from
> the various announcements, and a shorter one with just *.exe -
> any comments?

I have been using *.exe in my poison list for some time.  Less than
1% of what it quarantines is legitimate, so I have felt it to be
well worth the occasional effort to extract a valid message for

Andy Feldt
Senior System Support Programmer
Adjunct Assistant Professor
Department of Physics and Astronomy
The University of Oklahoma

More information about the esd-l mailing list