[Esa-l]Sircam

[Floyd Pierce]

Sample trapped file? What was I thinking... ***poisoned***

This is my current list ( I know that most wouldnt poison media files :-) )

*.pif *.scr *.asd *.chm *.dll *.ocx *.hlp *.hta *.js *.sh[bs] *.vb *.vb[se]
*.ws[cfh] *.com *.exe *.mp3 *.mpg *.mpeg *.avi *.mov *.mpe *.nws *.lnk *.bat
*.[a-z][a-z][a-z0-9]\s+.[a-z0-9][a-z0-9][a-z0-9]
*.[a-z][a-z][a-z0-9]\s+.[a-z0-9][a-z0-9]
*.[a-z][a-z]\s+.[a-z0-9][a-z0-9][a-z0-9]
*.[a-z][a-z]\s+.[a-z0-9][a-z0-9]
*.[a-z][a-z][a-z0-9].[a-z0-9][a-z0-9][a-z0-9]
*.[a-z][a-z][a-z0-9].[a-z0-9][a-z0-9]
*.[a-z][a-z].[a-z0-9][a-z0-9][a-z0-9]
*.[a-z][a-z].[a-z0-9][a-z0-9]
list.doc path.xls story.doc suppl.doc

--
Floyd Pierce              | Director of Information Technology
Phone  847-790-2830 (IL)  | Box USA
Phone  817-783-2355 (TX)  | floydp at boxusa.com
Fax    847-790-2880       | floyd at floydbob.com




> -----Original Message-----
> From: esa-l-admin at spconnect.com [mailto:esa-l-admin at spconnect.com]On
> Behalf Of John D. Hardin
> Sent: Tuesday, July 24, 2001 2:09 PM
> To: Email Security Announce list
> Subject: RE: [Esa-l]Sircam
>
>
> On Tue, 24 Jul 2001, Floyd Pierce wrote:
>
> > I don't remeber what's in John's sample trapped file, but it
> > should definitely have more than just *.exe.
>
> I've added a few more since SirCam showed up... :)
>
> --
>  John Hardin KA7OHZ   ICQ#15735746   http://www.wolfenet.com/~jhardin/
>  jhardin at impsec.org        pgpk -a finger://gonzo.wolfenet.com/jhardin
>   768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76
>  1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
> -----------------------------------------------------------------------
>   In 1998 more than three times as many people in the US were killed
>   by incompetent physicians than were killed by handguns, yet the
>   President of the A.M.A. is adopting "gun safety" as his platform.
> -----------------------------------------------------------------------
>    1197 days until the Presidential Election
> _______________________________________________
> E-mail Security Announce list mailing list
> E-mail Security Announce list at spconnect.com
> http://www.spconnect.com/mailman/listinfo/esa-l