Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Naked Schoolgirls

198 views
Skip to first unread message

Walter Driedger

unread,
Apr 7, 2004, 11:04:38 PM4/7/04
to
The website I deleted at the bottom of this post has the form
http://www....com/../xx.scr. Does this mean it loads down a screen saver
automatically? Can't *.scr files carry virus? Just curious. Of course, if
I were REALLY curious I would have tried it.

Walter.


<jthe...@CSUChico.EDU> wrote in message
news:c4rsfe$b2h$4...@hubble.csuchico.edu...
> Pics of schoolgirls ive taken on my hidden webcam
>
>> snip <<


John Popelish

unread,
Apr 7, 2004, 11:24:39 PM4/7/04
to
Walter Driedger wrote:
>
> The website I deleted at the bottom of this post has the form
> http://www....com/../xx.scr. Does this mean it loads down a screen saver
> automatically? Can't *.scr files carry virus? Just curious. Of course, if
> I were REALLY curious I would have tried it.

Yes.
http://www.f-secure.com/v-descs/ganda.shtml
http://www.symantec.com/avcenter/venc/data/w95.hybris.gen.html
http://www.viruslist.com/eng/viruslist.html?id=48615

--
John Popelish

Dan Bloomquist

unread,
Apr 7, 2004, 11:50:16 PM4/7/04
to

John Popelish wrote:
> http://www.viruslist.com/eng/viruslist.html?id=48615

Holly malicious payload! These guys are just plain mean.

Best, Dan.

--
http://lakeweb.net
http://ReserveAnalyst.com

Mr. Sparkle

unread,
Apr 8, 2004, 12:39:41 AM4/8/04
to

"Walter Driedger" <wal...@driesmithdger.ca> wrote in message
news:aj3dc.47942$Ig.45905@pd7tw2no...

> The website I deleted at the bottom of this post has the form
> http://www....com/../xx.scr. Does this mean it loads down a screen saver
> automatically? Can't *.scr files carry virus?

a .scr is nothing more than a windows executable.
yes it most definitely can (and probably does) carry a virus


Walter Driedger

unread,
Apr 8, 2004, 10:28:51 PM4/8/04
to
Sorry, I wasn't clear. What I meant was, can accessing a URL with it's name
ending in "....scr" cause the automatic downloading and activation of an
.scr file? I realize .scr files can carry virus, but would it activate
automatically or would I first have to do something more than simply
clicking on the URL?

Walter

"John Popelish" <jpop...@rica.net> wrote in message
news:4074C5F7...@rica.net...

John Popelish

unread,
Apr 8, 2004, 11:11:52 PM4/8/04
to
Walter Driedger wrote:
>
> Sorry, I wasn't clear. What I meant was, can accessing a URL with it's name
> ending in "....scr" cause the automatic downloading and activation of an
> .scr file? I realize .scr files can carry virus, but would it activate
> automatically or would I first have to do something more than simply
> clicking on the URL?

With many news readers and email readers, clicking on such a link
executes the program.

--
John Popelish

Don Klipstein

unread,
Apr 10, 2004, 2:02:53 AM4/10/04
to
In article <aj3dc.47942$Ig.45905@pd7tw2no>, Walter Driedger wrote:
>The website I deleted at the bottom of this post has the form
>http://www....com/../xx.scr. Does this mean it loads down a screen saver
>automatically? Can't *.scr files carry virus? Just curious. Of course, if
>I were REALLY curious I would have tried it.

Yes, .scr files can be/have virii. An .scr is similar to an .exe.

Other executable file types for Windows systems are .com ("command", a
lower level sort of executable file), .bat ("batch of DOS instructions"),
and .pif ("program information file", for "launching" an .exe or a .com
with usually passing on some specified parameters).
One problem that I have heard of with Microsoft operating systems is
that they "launch" executable files according to the type they are, even
if that does not match the type indicated by the extension part of their
names. For example, a file with the extension .pif or .scr can actually
be an .exe and executed as an .exe file.
I have even heard of risk with attached files showing extensions or
especially MIME-"wrapper" indications ("x-[type]") being forged to
something that looks more innocent, while the file is actually an .exe or
a .com and gets executed as such.

Also beware of unsolicited .zip files - those are .zip-compressed files
of any type, so you do not want your .zip decompressor to actually "open"
(which may include execute if executable) attached .zip files without your
per-file OK.

Another thing to beware of is multiple extensions, such as
goodmusic.mp3.pif - an unsolicited file along those lines is likely to be
a .pif (or actually an .exe being falsely "extension-named" as a .pif)
rather than an mp3.

- Don Klipstein (d...@misty.com)

0 new messages