AWARE [SYSTEMS] Imaging expertise for the Delphi developer
AWare Systems, Imaging expertise for the Delphi developer, Home TIFF and LibTiff Mailing List Archive

LibTiff Mailing List

TIFF and LibTiff Mailing List Archive
June 2004

Previous Thread
Next Thread

Previous by Thread
Next by Thread

Previous by Date
Next by Date

Contact

The TIFF Mailing List Homepage
This list is run by Frank Warmerdam
Archive maintained by AWare Systems



Valid HTML 4.01!



2004.06.10 18:52 "Virus warning??", by Joris Van Damme

People,

I always thought clicking a link could not ever do any harm, as opposed to eg
executing an executable mail attachment or such.

The message that came through few hours ago, with the title 'Mail Delivery
(failure...)', is very strange. It uses MIME types I've never seen before.
There's no plain text version for the HTML text. The link inside the HTML
message text seems to refer to an extra MIME part. This extra MIME part has the
type 'audio/x-wav', which seems to indicate that it is harmless, BUT
- I haven't ever seen 'audio/x-wav' before
- the name for this part is 'message.scr', and as you all know, scr is a sortoff
executable and can contain viri.

This all seems to indicate that this message is a virus. Presumably, the strange
MIME types serve in confusing mail clients, or possibly using some known
weakness or something that might result in executing the 'audio' part that is
probably not audio. Since I had never seen this particular type before
(especially with the link that I think may be dangerous to click), I thought it
best to post this warning. Mind you: I'm not entirely sure, since I'm not
willing to run any risk of infection.

The message is, of course, not included in the archive (mail delivery stuff,
not-in-the-office auto-answers, please-unsubscibe posts, and downright spam is
not archived).

Please note that I'm not going to waste your bandwidth for every piece of
garbadge that succeeds in penetrating Frank's fortress in the future, this
warning I issue only because we may be dealing with a new type that some, like
me, have not seen before. If you feel this warning only adds to the unsolicited
garbadge, please forgive me and ignore this message.


Joris Van Damme
info@awaresystems.be
http://www.awaresystems.be
Download your free TIFF tag viewer for windows here:
http://www.awaresystems.be/imaging/tiff/astifftagviewer.html