[prev in list] [next in list] [prev in thread] [next in thread] 

List:       focus-virus
Subject:    Re: Naked Wife - Virus? (subject kept just to annoy a few lamers
From:       "Lawrence W. Smith" <lws () JUICECO ! COM>
Date:       2001-03-15 17:44:51
[Download RAW message or body]

Fairly easily, in reverse order:

1) appropriate user rights v admin rights will prevent you
from disabling the local scanner.

2) the local drive is only writeable to you in a 2 locations,
  your temp and local user areas (or just temp) this is covered
  by the realtime scanner (you couldn't disable in (1))

3) the network drives you have are a mix of readonly and read/write
  but all are covered by real time scanning on the servers
  providing them.

4) many webmail accounts are auto scanned to some extent
  anyway.

5) some webcache / proxies will sweep too

L

> -----Original Message-----
> From: John Sleiziz [mailto:jsleiziz@JOHNSDESIGN.NET]
> Sent: Thursday, March 15, 2001 6:26 AM
> To: FOCUS-VIRUS@SECURITYFOCUS.COM
> Subject: Re: Naked Wife - Virus?
>
>
>   After spending the last few days reading the posts on this topic,
> something occurred to me. Not being an sysadmin, let me run a possible
> problem.
>    I'm an employee at a company, where attachments are blocked in some
> form or function; now, I also have a computer at home, and
> have several
> web based email accounts set up (Hotmail/Yahoo). During lunch
> one day, I
> decide to check my private email account at work. Lo and
> behold, here's
> the latest virus in my inbox... Would I not be bypassing the security
> that's been set up, if I downloaded it? Being that the company's
> computers are networked, what would stop me from downloading it to a
> remote computer (into a hidden folder that I created? Plus, I could
> rename the file). I could run it from where I am, correct?
>    If I downloaded it to a hidden folder on the terminal I'm using, I
> could turn off the av scanner before running...
>    How would a situation like this be handled?
>
>             John
>
>
> --
> *Always remember to pillage BEFORE you burn.*
>
> John's Web Site Design.
> http://www.johnsdesign.net
>
>
>

[prev in list] [next in list] [prev in thread] [next in thread]