Multiple Vendor Virus Scanner Recycle Bin Exclusion Vulnerability

Many commercial virus scanners for Windows platforms exclude the Recycled folder on the hard drive from their scans. The Recycled folder is where Win9x operating systems keep files that have been deleted via the GUI but not purged from the Recycle Bin. Files of any nature can be manually placed in the Recycled folder. Therefore, it is possible for any user or program to put code into that folder that will never be subject to virus scans.

Although WinNT makes use of a folder called 'Recycler' for similar purposes, many virus scanners for NT still have the 'Recycled' folder listed in the exclusions.

Note that other virus scanners than those listed under the 'info' tab may be vulnerable as well.


 

Privacy Statement
Copyright 2010, SecurityFocus