Wilders Security Forums  

Go Back   Wilders Security Forums > Other Security Topics > malware problems & news
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old September 11th, 2008, 05:12 PM
EdP EdP is offline
Regular Poster
 
Join Date: Mar 2004
Posts: 78
Default Disseminating Executables

Occasionally, I create a slideshow using IrfanView and save it as an EXE file. Sometimes I want to send it to others, but emailing it can be problematic because most people have some sort of email monitoring software that goes ballistic when an EXE file shows up.

I've thought of simply omitting the extension and have the recipients rename the file. Two problems with that - one, I think some monitoring programs scan the file instead of just looking at the extension and two, some people don't know how to rename a file.

So I thought of uploading the file to a file-sharing site such as DROP.IO and have the chosen recipients download and run it. Now my concern is that such a site can be compromised by nefarious jerks who replace EXE files with malware executables having the same name.

Maybe it's back to the post office?

EdP
  #2  
Old September 11th, 2008, 05:45 PM
jrmhng's Avatar
jrmhng jrmhng is offline
Very Frequent Poster
 
Join Date: Nov 2007
Location: Australia
Posts: 1,268
Default Re: Disseminating Executables

Just use a program like 7Zip to zip and encrypt it. Make sure the file names are encrypted too.
__________________
Windows 7 Professional
Avira - Secunia PSI - Hostsman
Firefox - No Script - LastPass
  #3  
Old September 12th, 2008, 11:40 AM
EdP EdP is offline
Regular Poster
 
Join Date: Mar 2004
Posts: 78
Default Re: Disseminating Executables

What does the recipient need to have installed on his PC to unzip the file?
  #4  
Old September 12th, 2008, 02:23 PM
Mrkvonic Mrkvonic is offline
Linux Systems Expert
 
Join Date: May 2005
Posts: 7,465
Default Re: Disseminating Executables

Hello,

The best thing is to upload it somewhere and then send a md5 signature to your friends, so they can compare the sum of the downloaded file with the one you uploaded.

In most cases, I would not want to receive an .exe from a friend in an email, especially if it comes in a passworded archive ...

Mrk
__________________
http://www.dedoimedo.com

All your base are belong to us

Linux Systems Expert / Systems Programmer, Linux System Administrator, LPIC-1, LPIC-2 (WIP), GSEC, CCHD, CCHA
  #5  
Old September 12th, 2008, 06:51 PM
JRViejo's Avatar
JRViejo JRViejo is online now
Global Moderator
 
Join Date: Jul 2008
Posts: 10,595
Default Re: Disseminating Executables

Quote:
Originally Posted by EdP
What does the recipient need to have installed on his PC to unzip the file?
If you decide to use 7-zip, since it's free, all your recipients can download it as well. If you also wish to have the Zip file password protected, make sure to either let them know what it is, ahead of time, or include the password in your message.
  #6  
Old September 13th, 2008, 09:01 AM
EdP EdP is offline
Regular Poster
 
Join Date: Mar 2004
Posts: 78
Default Re: Disseminating Executables

Thanks for the input.

EdP
 

Wilders Security Forums > Other Security Topics > malware problems & news « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 12:36 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums