Author Topic: Does removing file extensions protect against viruses?  (Read 2671 times)

0 Members and 1 Guest are viewing this topic.

stoink

  • Guest
Does removing file extensions protect against viruses?
« on: May 12, 2012, 11:32:54 PM »
I'm developing a website for uploading and encrypting files.

If someone were to upload a malicious file, would removing/renaming the file extension prevent any harm to my server?


Thanks.

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: Does removing file extensions protect against viruses?
« Reply #1 on: May 12, 2012, 11:55:51 PM »
If you have a program to run unknown files, then no.
If you have a program that runs any file as a specific file (runs .scr files as .exe) then no.

If it is a website for uploading and encrypting files, do you ever have to "open" or "execute" the file?
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

stoink

  • Guest
Re: Does removing file extensions protect against viruses?
« Reply #2 on: May 13, 2012, 12:02:23 AM »
Hi,

No, the files are never executed on the server, only stored. They're also uploaded in chunks.

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: Does removing file extensions protect against viruses?
« Reply #3 on: May 13, 2012, 12:27:28 AM »
Then I would imagine that the files can never harm your server unless executed. To be safe, you can rename the files. Is there any advantage to keeping the original name?
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."