Common Tasks

Recent Posts

Community

Email Notifications

Personal Links

Archives

Security Protection - Harry Waldron (CS)

Security Best Practices, Breaking News, & Updates

Bagle.AA worm - Medium Risk (CPL and HTA extensions)

Special Note - suffix letters may not match up due to naming conventions among AV Vendors 

McAfee
http://vil.nai.com/vil/content/v_124875.htm

Symantec
http://www.symantec.com/avcenter/venc/data...eagle.x@mm.html

Trend
http://www.trendmicro.com/vinfo/virusencyc...me=WORM_BAGLE.Z

F-Secure
http://www.f-secure.com/v-descs/bagle_z.shtml

Important consideration: CPL & HTA extensions

The CPL and HTA extensions may not be blocked in many company firewall systems. The attachment can have any of the following extension names: ·COM, ·CPL, ·EXE, ·HTA, ·SCR, ·VBS, ·ZIP

The link below is a good list for blocking email attachments based for extension types which are suseptible to viruses.

eMail Attachment Block-List
http://googleit.aptonline.net/pages/emailblocklist.html