Welcome to SecurityForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Zonealarm extensions

 
   Security Forums (Home) -> General Discussions RSS
Next:  NOd32 or F-Secure?  
Author Message
Dodgy Dave

External


Since: Oct 10, 2004
Posts: 1



(Msg. 1) Posted: Sun Oct 10, 2004 9:53 am
Post subject: Zonealarm extensions
Archived from groups: alt>comp>anti-virus (more info?)

Hi. I've been emailed a program and some drivers but Zonealarm has changed
the extension as a security precaution. I know that the files are safe &
need to get them back to their rightful extension as they won't work the way
they are - how do i do that? Thanx for any help.

 >> Stay informed about: Zonealarm extensions 
Back to top
Login to vote
Frans Meijer

External


Since: Oct 07, 2004
Posts: 2



(Msg. 2) Posted: Sun Oct 10, 2004 6:20 pm
Post subject: Re: Zonealarm extensions [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

On Sun, 10 Oct 2004, Dodgy Dave wrote:

> Hi. I've been emailed a program and some drivers but Zonealarm has
> changed the extension as a security precaution. I know that the files
> are safe & need to get them back to their rightful extension as they
> won't work the way they are - how do i do that? Thanx for any help.

Save them and change the extension to what they were before, most likely
..exe? The last time I used Zonealarm (it's long ago, I admit) the original
extensions could easily be guessed from what Zonealarm changed them to.

 >> Stay informed about: Zonealarm extensions 
Back to top
Login to vote
Buffalo

External


Since: Jul 01, 2004
Posts: 195



(Msg. 3) Posted: Sun Oct 10, 2004 6:44 pm
Post subject: Re: Zonealarm extensions [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"Dodgy Dave" <davewallace1SPAMTRAP RemoveThis @REMOVETHISlycos.co.u> wrote in
message news:2ssbkcF1p88rrU1@uni-berlin.de...
> Hi. I've been emailed a program and some drivers but Zonealarm has
changed
> the extension as a security precaution. I know that the files are
safe &
> need to get them back to their rightful extension as they won't work
the way
> they are - how do i do that? Thanx for any help.

I would think that there would be a list in ZA, but I can't find it.
If you choose to run it, ZA will give you two warning screens.
The first screen tells you what kind of attachment it is ie:
registration entry.
If you want to go through the trouble to see which changed ext is
what, do a Start,Run and type regedit.
Expand the HKey_Classes_Root and just scroll down until you see the ZA
extension that the attachment was changed to.
Highlight it and then double click on the Original Extension entry
on the right column. (or rt clk and choose Edit)
Example : scroll down to .zl9 and highlite it. In the rt column
double click on 'Original Extension' and it will show you .exe .

"To open a quarantined attachment:
In Windows Explorer, browse to the file you want to open.
Double-click the attachment to open it.
When you attempt to open an attachment that has been quarantined, Zone
Labs security software warns you of the potential risk in opening the
attachment.

Click Inspect with Notepad."

If you select to run that quarantined file, just keep clicking through
the ZA warnings and it will open with the right extension.
 >> Stay informed about: Zonealarm extensions 
Back to top
Login to vote
mhagen

External


Since: Sep 21, 2003
Posts: 16



(Msg. 4) Posted: Mon Oct 11, 2004 10:04 am
Post subject: Re: Zonealarm extensions [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Laura Fredericks wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Sun, 10 Oct 2004 18:44:56 GMT, "Buffalo"
> <eric(nospam)@nada.com.invalid> wrote in post:
>
>>I would think that there would be a list in ZA, but I can't
>>find it.
>
>
> ZA Mailsafe extensions:
>
> z0=js
> z1=vb
> zl0=ade
> zl1=adp
> zl2=bas
> zl3=bat
> zl4=chm
> zl5=cmd
> zl6=com
> zl7=cpl
> zl8=crt
> zl9=exe
> zla=hlp
> zlb=hta
> zlc=inf
> zld=ins
> zle=isp
> zlf=jse
> zlg=lnk
> zlh=mdb
> zli=mde
> zlj=msc
> zlk=msi
> zll=msp
> zlm=mst
> zln=pcd
> zlo=pif
> zlp=reg
> zlq=scr
> zlr=sct
> zls=shs
> zlt=url
> zlu=vbe
> zlv=vbs
> zlw=wsc
> zlx=wsf
> zly=wsh
> zlz=asx
> zm0=dbx
> zm1=mda
> zm2=mdz
> zm3=nch
> zm4=prf
> zm5=scf
> zm6=shb
> zm7=wms
> zm8=mht
> zm9=zip
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP 8.1
> Comment: MY PUBLIC KEY www.queenofcyberspace.com/laura_fredericks.asc
>
> iQA/AwUBQWmKBaRseRzHUwOaEQJp1wCbBOkA2kxf44zRuTkl/kV86zKTG8wAnRLo
> 5PyJ4SHVj0OTPRIMGZ9IepzK
> =exj0
> -----END PGP SIGNATURE-----
>
Thanks much. Since somebody here knows ZA, I'll put my foot firmly into
it , because I haven't been able to get this info anywhere. Just where
does ZA put those quarantined files? They are most definitely not in
the inbox. ZA tech support repeats that like its a mantra.

I run the latest ZA Pro, Mozilla 1.8a with a several years long junk
training file and a set of thorough but mysterious set of filters at my
ISP. I can't find the pesky messages even with a disk search for
anything containing *zl*. I now see there are other combinations. ideas?
 >> Stay informed about: Zonealarm extensions 
Back to top
Login to vote
Miles Fromier

External


Since: Sep 17, 2004
Posts: 24



(Msg. 5) Posted: Mon Oct 11, 2004 10:30 am
Post subject: Re: Zonealarm extensions [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"Dodgy Dave" <davewallace1SPAMTRAP RemoveThis @REMOVETHISlycos.co.u> wrote in message news:2ssbkcF1p88rrU1@uni-berlin.de...
> Hi. I've been emailed a program and some drivers but Zonealarm has changed
> the extension as a security precaution. I know that the files are safe &
> need to get them back to their rightful extension as they won't work the way
> they are - how do i do that? Thanx for any help.

Fire up the registry editor and navigate to

HKEY_CLASSES_ROOT

Under the extension you now have you will find what it was changed from.
 >> Stay informed about: Zonealarm extensions 
Back to top
Login to vote
Buffalo

External


Since: Jul 01, 2004
Posts: 195



(Msg. 6) Posted: Mon Oct 11, 2004 6:16 pm
Post subject: Re: Zonealarm extensions [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"mhagen" <replyto.TakeThisOut@group.only> wrote in message
news:10mlf8cn08op5da@corp.supernews.com...
> > >
> Thanks much. Since somebody here knows ZA, I'll put my foot firmly
into
> it , because I haven't been able to get this info anywhere. Just
where
> does ZA put those quarantined files? They are most definitely not
in
> the inbox. ZA tech support repeats that like its a mantra.
>
> I run the latest ZA Pro, Mozilla 1.8a with a several years long junk
> training file and a set of thorough but mysterious set of filters at
my
> ISP. I can't find the pesky messages even with a disk search for
> anything containing *zl*. I now see there are other combinations.
ideas?

I don't believe it 'qurantines' it really. When it changes the ext in
OE, the messages just stay in the Inbox with the new extension.
To open them, either keep on trying to open them through all the
warning messages, or just save the file somewhere and rename its ZA
ext back to the original one.
 >> Stay informed about: Zonealarm extensions 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
Extensions - ..exe ..pif ..bat ..scr (seems to add /S argument) ..com ..cmd any idea of other extensions which lead to the execution of MZ executables ?

File extensions to exclude from scanning - Hello everybody, currently I'm using the student version of McAfee VirusScan 7 on my Windows XP computer. The McAfee software allows for providing a whitelist of file extensions that will not get scanned. While I have the on-demand scanner scheduled to...

Executable file with double extensions question (help) - Hi I hate to ask, but I downloaded a software called TrojanHunter and when I scanned my computer with it. It showed me Warning: Executable file with double extensions found: C:\WINDOWS\bwUnin-6.2.3.66L.exe I am not sure what that is or if, I should get..

ZoneAlarm - How can I stop the automatic 'call home' function in Zone Alarm 4.5.530 ? It keeps popping up a box asking permission to check for updates. I don't want the box and I want to check for updates at a time that suits me. ___________________ Graeme..

Zonealarm 5 with AV - Installed this product and working ok, but ... I test it by sending myself an email with the eicar virus attached and although ZA is supposed to be scanning outgoing mail, it doesn't seem to notice this virus, although it does deterct and clean it on....
   Security Forums (Home) -> General Discussions All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]