Tech Talk

[here]

FYI...

- http://www.techworld.com/news/index.cfm?fuseaction=displaynews&NewsID=988
06 February 2004
"E-mail users who were slow to update their anti-virus software last week may have been surprised to receive a flood of e-mail messages containing ZIP files...The e-mail was sent by the recent Mydoom e-mail worm. The ZIP attachments were evidence of what antivirus experts say is a new trend in virus writing circles: using compressed ZIP files to hide viruses and elude detection by anti-virus engines...While ZIP files were occasionally used to mask virus payloads, the practice wasn't common in virus writing circles...All that changed with the release of Microsoft's Windows XP operating system, which included native support for opening ZIP files. That allowed virus writers to count on users being able to unzip their attachment and open the virus file stored inside, Shipp said...Zipping also changes the unique signature on the virus attachment, making it harder for anti-virus engines to detect the malicious program, he said. Eighty percent of the Mydoom samples that were submitted to Cloudmark, from its SpamNet network of 800,000 users, had ZIP attachments, Prakash said..."

the windowsXP ZIP file support seems to be buggy to me. Am I the only one who noticed this?