detect executables embedded inside MS Office documents?
Furnish, Trever G
TGFurnish at herffjones.com
Mon Apr 7 16:06:49 IST 2008
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
> Of Julian Field
> Sent: Sunday, April 06, 2008 11:09 AM
> To: MailScanner discussion
> Subject: Re: detect executables embedded inside MS Office documents?
> Ignore all previous requests for information. I've got enough
> of it, pretty much.
> The only thing I cannot handle is inserted OLE "Packages"
> that contain multiple files. If someone fancies creating one
> of those and sending it to me, I'll improve the Package
> parser to cope with it.
> But it now works with files inserted into Microsoft Office
> documents just fine.
> This will be in the next release.
> I guess it's a fairly major new feature, the ability to
> extract embedded files from Microsoft Office documents.
> I think I'm going to have a rest now...
Wow! I didn't really expect much response on that request! Thank you
very much! I look forward to testing, although I'll admit I'm also
hoping the method itself never takes off in the malware world.
More information about the MailScanner