As a result of the rapid release of many new email viruses on a daily
basis, recent emergency measures used to remove virus files from email
messages are being revised - these measures will remain in effect until
further notice.

1) Messages containing a known virus will be discarded and not delivered.

2) Files attached to messages which are one of the following types
commonly associated with viruses will be removed:
.pif .bat .cmd .scr .com (and .zip files which contain these types).
A small note will be added to the message text:
"This message contains one or more attachments that are of a type
that commonly carry malicious software such as viruses. To prevent
accidental virus infection, the attachment(s) were removed: *list*"

3) Other types of "unsafe" files which - to this point - are not commonly
used by viruses, will be renamed to prevent accidental infection if they
do contain a virus.  These types include:
.asp .inf .reg .hta (and .zip files which contain these types)
A full list is contained in Microsoft knowledgebase 291369
http://support.microsoft.com/default.aspx?scid=kb;EN-US;291369
The following note will be added to such messages:
"This message contains one or more attachments that are of a type
that commonly carry malicious software such as viruses. To prevent
accidental virus infection, the attachment(s) were renamed as follows:
*list*"

An explanation page with more information can be found here:
http://infosec.yorku.ca/handling_unsafe_attachments.html

Questions or concerns about this note, should be directed to
the CNS Helpdesk in the Computing Commons, William Small Centre,
(voice: 416-736-5800, email: [log in to unmask]).


CNS Announce