Upload the virus using the web form

Question

Can a virus be downloaded to a remote computer using a web form? If so, how can we prevent this by assuming that we limit file types to images only?

Answer 1

The best way to avoid problems with user-downloaded files of any type is to have a command line virus scanner on the server that you use to scan files after downloading. If the result of the scanner is positive, delete the file, write down its IP address and inform the user.

This is a pain to install for the first time, but it is a life-saving.

Answer 2

, - ASP.NET, -, . , - ?

, - , . .

, - (, ), , , , , .

:

• ;
• (/ ?) ( ), ;
• .
• .NET/GDI/GDI + ( ), ( ), ( , ) .

, , , , .

Answer 3

-, , , , "" ( - ). , , .

- (, , ), , . , .

Answer 4

- . http://news.cnet.com/JPEG-exploit-could-beat-antivirus-software/2100-7349_3-5388633.html

Answer 5

ClamAV , . , .

Answer 6

, . () . , , .

, - HTTP POST - HTTP- , .

Answer 7

, , ?

Answer 8

....

coz virus these days can infect any files .. doc to psd nothing ..

Maybe I thought about using AV for the server. One such product can be found here.

http://www.f-secure.com/en_EMEA/products/business/servers/anti-virus-for-servers/index.html

Answer 9

Just a thought. If possible, will there be recompression / rescaling, etc. Is the image damaged by the virus and makes it unusable?