Thread: How to Avoid -
View Single Post
  #14 (permalink)  
Old 03-02-2009, 02:53 PM
mikmik mikmik is offline
WebProWorld 1,000+ Club
 
Join Date: Aug 2003
Location: Edmonton, AB, Canada
Posts: 1,527
mikmik RepRank 2mikmik RepRank 2
Default Re: How to Avoid -

Quote:
Originally Posted by sushil View Post
Code:
originally posted by wenwilder
Configure your email server to block or remove email that contains
file attachments that are commonly used to spread viruses.
This is the list of attachment suffixes that are considered by
Microsoft to be potentially malicious (are blocked by Outlook XP):
.ade, .adp, .asx, .bas, .bat, .chm, .cmd, .com, .cpl, .crt, .exe,
.hlp, .hta, .inf, .ins, .isp, .js, .jse, .lnk, .mdb, .mde, .msc,
.msi, .msp, .mst, .pcd, .pif, .prf, .reg, .scf, .scr, .sct, .shb,
.shs, .url, .vb, .vbe, .vbs, .wsc, .wsf, .wsh
your post is great. but I am not able to understand this statement can you explain it.
thanks for that.
I feel priveledged to help wenwilder, but we go way back.

All these 'file extensions' are basically classifiers that tell windows what program to open the file with. For instance, files with a '.doc' extension with call the Word program which will then open that document. '.Txt' will call notepad, and '.mp3' will call Windows media player(or perhaps Apple quicktime/iTunes if you have that installed).

The above file extensions are called 'executables' and will call, for example, windows installer, windows scripting host(have you heard of script kiddies?), and many programs native to windows that run commands.

Here is an explanation for '.msi' at a particularily good site: fileinfo.net - MSI File Extension - Open .MSI files

Here is an explanation on why to show file extensions and how to do it:
Quote:
Windows is set by default to not show extensions on filenames. This is done presumably to make lists of files less cluttered to read -- a definite plus.

Although it is very important to know what kind of file a file is, most of us are familiar with the icons of many files and don't think we really need to see the extensions to know that a Word file's icon has a big blue "W" in it and an HTML file's icon has a big blue "e" in it.

However, many of us are not familiar with the blue scroll of a .vbs file or the yellow scroll of a .js file. This is important, because the current round of virus/worm attacks on Windows machines by script attachments use filenames like

loveletter.txt.vbs
Most mail clients will filter these and give a warning, but wenwilder meant that to protect yourself from (most likely) harmful attatchments, it is best to just filter these(do be deleted) to begin with.
It is those hidden file extensions, like 'somepicture.jpg.vbs' where it looks like it is a picture - .jpg - but you don't see the .vbs extension that makes it very, very important to enable file extensions view, as explained in the link above. It is always almost the first thing I enable on my computers and also clients, with an explanation.

Hope this helps. I am not always very clear, so please, do ask questions!

>edit< Sheet, now I see weegillis! Don't tell him I said that he has more common sense than most, haha buddy!

Last edited by mikmik; 03-02-2009 at 02:58 PM.
Reply With Quote