Zonealarm extensions

  • Thread starter Thread starter Dodgy Dave
  • Start date Start date
D

Dodgy Dave

Hi. I've been emailed a program and some drivers but Zonealarm has changed
the extension as a security precaution. I know that the files are safe &
need to get them back to their rightful extension as they won't work the way
they are - how do i do that? Thanx for any help.
 
Hi. I've been emailed a program and some drivers but Zonealarm has
changed the extension as a security precaution. I know that the files
are safe & need to get them back to their rightful extension as they
won't work the way they are - how do i do that? Thanx for any help.
Click to expand...

Save them and change the extension to what they were before, most likely
..exe? The last time I used Zonealarm (it's long ago, I admit) the original
extensions could easily be guessed from what Zonealarm changed them to.
 
Dodgy Dave said:
Hi. I've been emailed a program and some drivers but Zonealarm has changed
the extension as a security precaution. I know that the files are safe &
need to get them back to their rightful extension as they won't work the way
they are - how do i do that? Thanx for any help.
Click to expand...

I would think that there would be a list in ZA, but I can't find it.
If you choose to run it, ZA will give you two warning screens.
The first screen tells you what kind of attachment it is ie:
registration entry.
If you want to go through the trouble to see which changed ext is
what, do a Start,Run and type regedit.
Expand the HKey_Classes_Root and just scroll down until you see the ZA
extension that the attachment was changed to.
Highlight it and then double click on the Original Extension entry
on the right column. (or rt clk and choose Edit)
Example : scroll down to .zl9 and highlite it. In the rt column
double click on 'Original Extension' and it will show you .exe .

"To open a quarantined attachment:
In Windows Explorer, browse to the file you want to open.
Double-click the attachment to open it.
When you attempt to open an attachment that has been quarantined, Zone
Labs security software warns you of the potential risk in opening the
attachment.

Click Inspect with Notepad."

If you select to run that quarantined file, just keep clicking through
the ZA warnings and it will open with the right extension.
 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I would think that there would be a list in ZA, but I can't
find it.
Click to expand...

ZA Mailsafe extensions:

z0=js
z1=vb
zl0=ade
zl1=adp
zl2=bas
zl3=bat
zl4=chm
zl5=cmd
zl6=com
zl7=cpl
zl8=crt
zl9=exe
zla=hlp
zlb=hta
zlc=inf
zld=ins
zle=isp
zlf=jse
zlg=lnk
zlh=mdb
zli=mde
zlj=msc
zlk=msi
zll=msp
zlm=mst
zln=pcd
zlo=pif
zlp=reg
zlq=scr
zlr=sct
zls=shs
zlt=url
zlu=vbe
zlv=vbs
zlw=wsc
zlx=wsf
zly=wsh
zlz=asx
zm0=dbx
zm1=mda
zm2=mdz
zm3=nch
zm4=prf
zm5=scf
zm6=shb
zm7=wms
zm8=mht
zm9=zip

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1
Comment: MY PUBLIC KEY www.queenofcyberspace.com/laura_fredericks.asc

iQA/AwUBQWmKBaRseRzHUwOaEQJp1wCbBOkA2kxf44zRuTkl/kV86zKTG8wAnRLo
5PyJ4SHVj0OTPRIMGZ9IepzK
=exj0
-----END PGP SIGNATURE-----

--
Laura Fredericks
PGP key ID - DH/DSS 2048/1024: 0xC753039A

Usenet Flamewars:
http://www.queenofcyberspace.com/usenet/

Remove CLOTHES to reply.
 
Dodgy Dave said:
Hi. I've been emailed a program and some drivers but Zonealarm has changed
the extension as a security precaution. I know that the files are safe &
need to get them back to their rightful extension as they won't work the way
they are - how do i do that? Thanx for any help.
Click to expand...

Fire up the registry editor and navigate to

HKEY_CLASSES_ROOT

Under the extension you now have you will find what it was changed from.
 
Laura Fredericks said:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



ZA Mailsafe extensions:

z0=js
z1=vb
zl0=ade
zl1=adp
zl2=bas
zl3=bat
zl4=chm
zl5=cmd
zl6=com
zl7=cpl
zl8=crt
zl9=exe
zla=hlp
zlb=hta
zlc=inf
zld=ins
zle=isp
zlf=jse
zlg=lnk
zlh=mdb
zli=mde
zlj=msc
zlk=msi
zll=msp
zlm=mst
zln=pcd
zlo=pif
zlp=reg
zlq=scr
zlr=sct
zls=shs
zlt=url
zlu=vbe
zlv=vbs
zlw=wsc
zlx=wsf
zly=wsh
zlz=asx
zm0=dbx
zm1=mda
zm2=mdz
zm3=nch
zm4=prf
zm5=scf
zm6=shb
zm7=wms
zm8=mht
zm9=zip

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1
Comment: MY PUBLIC KEY www.queenofcyberspace.com/laura_fredericks.asc

iQA/AwUBQWmKBaRseRzHUwOaEQJp1wCbBOkA2kxf44zRuTkl/kV86zKTG8wAnRLo
5PyJ4SHVj0OTPRIMGZ9IepzK
=exj0
-----END PGP SIGNATURE-----

--
Laura Fredericks
PGP key ID - DH/DSS 2048/1024: 0xC753039A

Usenet Flamewars:
http://www.queenofcyberspace.com/usenet/

Remove CLOTHES to reply.
Click to expand...

Thanks for the list.
 
Laura said:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1




ZA Mailsafe extensions:

z0=js
z1=vb
zl0=ade
zl1=adp
zl2=bas
zl3=bat
zl4=chm
zl5=cmd
zl6=com
zl7=cpl
zl8=crt
zl9=exe
zla=hlp
zlb=hta
zlc=inf
zld=ins
zle=isp
zlf=jse
zlg=lnk
zlh=mdb
zli=mde
zlj=msc
zlk=msi
zll=msp
zlm=mst
zln=pcd
zlo=pif
zlp=reg
zlq=scr
zlr=sct
zls=shs
zlt=url
zlu=vbe
zlv=vbs
zlw=wsc
zlx=wsf
zly=wsh
zlz=asx
zm0=dbx
zm1=mda
zm2=mdz
zm3=nch
zm4=prf
zm5=scf
zm6=shb
zm7=wms
zm8=mht
zm9=zip

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1
Comment: MY PUBLIC KEY www.queenofcyberspace.com/laura_fredericks.asc

iQA/AwUBQWmKBaRseRzHUwOaEQJp1wCbBOkA2kxf44zRuTkl/kV86zKTG8wAnRLo
5PyJ4SHVj0OTPRIMGZ9IepzK
=exj0
-----END PGP SIGNATURE-----
Click to expand...
Thanks much. Since somebody here knows ZA, I'll put my foot firmly into
it , because I haven't been able to get this info anywhere. Just where
does ZA put those quarantined files? They are most definitely not in
the inbox. ZA tech support repeats that like its a mantra.

I run the latest ZA Pro, Mozilla 1.8a with a several years long junk
training file and a set of thorough but mysterious set of filters at my
ISP. I can't find the pesky messages even with a disk search for
anything containing *zl*. I now see there are other combinations. ideas?
 
mhagen said:
Thanks much. Since somebody here knows ZA, I'll put my foot firmly into
it , because I haven't been able to get this info anywhere. Just where
does ZA put those quarantined files? They are most definitely not in
the inbox. ZA tech support repeats that like its a mantra.

I run the latest ZA Pro, Mozilla 1.8a with a several years long junk
training file and a set of thorough but mysterious set of filters at my
ISP. I can't find the pesky messages even with a disk search for
anything containing *zl*. I now see there are other combinations.
Click to expand...
ideas?

I don't believe it 'qurantines' it really. When it changes the ext in
OE, the messages just stay in the Inbox with the new extension.
To open them, either keep on trying to open them through all the
warning messages, or just save the file somewhere and rename its ZA
ext back to the original one.
 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Just where does ZA put those quarantined files? They are most
definitely not in the inbox.
Click to expand...

It depends on what e-mail program you use. I use Eudora. I
sent myself a test e-mail, with a screensaver (*.scr) attached.
The mail arrived with the attachment correctly renamed to
*.zlq, and was in Eudora's attachment directory.

I then sent the same e-mail and attachment to my Hotmail
account, and retrieved it via (ugh) Outlook Express. (Note: I
have Win98; OE v6. Perhaps other Windows versions handle OE
attachments differently.) The *.scr file arrived as an
attachment, but WITHOUT being renamed to *.zlq. (Hmm... This
is not good. I'll have to check this out, later.) Note, OE
doesn't separate attachments from the message like Eudora does,
so if I wanted the attachment, I would have to right-click on
the file and do a "Save As". Therefore, doing a search for
".zlq" files would yield zilch.

I have no idea how Mozilla handles e-mail attachments. Perhaps
someone here with Mozilla and Zone Alarm can help you.

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1
Comment: MY PUBLIC KEY www.queenofcyberspace.com/laura_fredericks.asc

iQA/AwUBQWrU1KRseRzHUwOaEQI7tACePPAtxZwWqmwGPZ01dDoytI6vUXkAn2ht
and3IF3r+gyS5XnYEw8wMu5B
=5vbV
-----END PGP SIGNATURE-----

--
Laura Fredericks
PGP key ID - DH/DSS 2048/1024: 0xC753039A

Usenet Flamewars:
http://www.queenofcyberspace.com/usenet/

Remove CLOTHES to reply.
 
Back
Top