[Esd-l] Worm(?) warning

John D. Hardin jhardin at impsec.org
Mon Jun 24 14:34:42 PDT 2002

On Mon, 24 Jun 2002, Darryl Ross wrote:

> Windows 2000 will actually do (what I'd explain as a) `file`
> command on the file and then loads the applicable program. Not
> sure how it does it, but it will load up Office documents, etc,
> that have been renamed by the sanitiser.

I know it does that for Office documents (Microsoft considers them
"special", too :) but I wasn't aware it would do that for PEs. If you
do NOT have winzip installed, and you double-click on a PE (.exe) file
that named "whatever.ZIP" does the program indeed launch? Or does it
ask you what program you want to open the file with?

 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
  768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76 
 1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
 "To disable the Internet to save EMI and Disney is the moral
  equivalent of burning down the library of Alexandria to ensure the
  livelihood of monastic scribes."
                                    -- John Ippolito of the Guggenheim
   333 days until The Matrix Reloaded

More information about the esd-l mailing list