New dangerous attachment filenames

Julian Field mailscanner at ecs.soton.ac.uk
Thu Sep 9 16:42:53 IST 2004


Microsoft have apparently expanded their list of "High-risk file types"
with the release of Windows XP SP2. The new list of high-risk dangerous
attachments they have added are:
.ade
.adp
.app
.asp
.bas
.bat
.cer
.chm
.cmd
.com
.cpl
.crt
.csh
.exe
.fxp
.hlp
.hta
.inf
.ins
.isp
.its
.js
.jse
.ksh
.lnk
.mad
.maf
.mag
.mam
.maq
.mar
.mas
.mat
.mau
.mav
.maw
.mda
.mdb
.mde
.mdt
.mdw
.mdz
.msc
.msi
.msp
.mst
.ops
.pcd
.pif
.prf
.prg
.pst
.reg
.scf
.scr
.sct
.shb
.shs
.tmp
.url
.vb
.vbe
.vbs
.vsmacros
.vss
.vst
.vsw
.ws
.wsc
.wsf
.wsh

I have added what are apparently the worst of these to the default
filename.rules.conf file.
The new file is attached.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
    [ Part 2, Application/OCTET-STREAM (Name: "filename.rules.conf")  ]
    [ 8.2KB. ]
    [ Unable to print this part. ]


    [ Part 3: "Attached Text" ]

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).


More information about the MailScanner mailing list