🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: demon.tech.pc
Article #22819

Re: Has anyone received the new "I LOVE YOU" Virus email yet ?

#22819
From: Tom
Date: Fri, 05 May 2000 00:00
39 lines
2477 bytes
In article <ZVFQ4.8098$E44.194907@news6-win.server.ntlworld.com>,
barry.morgan <barry.morgan@ntlworld.com> writes
>
>Tim Gowen <tim@nospam.demon.co.uk> wrote in message
>news:NAomfyA6JwE5Ewch@equipoise.demon.co.uk...
>>
>> I've just seen the 6 O'Clock news, and a man at the Manilla-based ISP
>> claims that he'd stopped a second, more harmful virus, which "could have
>> enabled others to gain access to people's computers, steal credit card
>> numbers and state secrets."
>
>Having said that, there are now copy-cat versions going about :-(
>
>> Sounds a bit too much to be true.  Gaining access to computers, yes, but
>> the rest seemed a bit alarmist.
>
>Dunno how deep a vbs script can go into the system, presume it's possible
>since it is allowed to modify the registry.
>
>> And if he stopped that one - which was imbedded in the first - how come
>> he couldn't stop the first.  I think the problem here is that the
>> journalists don't know what they're saying, and tend to not go into
>> enough detail.
>
>Or make it up if the story hasn't enough *meat* in it !!!!
>
>Have heard that disabling Windows Scripting Host stops these sort of attacks
>in the first place. Any comment anyone - I've done it anyway just in case
>:-)
>
I'm not sure exactly how the file is invoked from OE, but the normal way
of preventing stray .js, .vbs and .reg files from wreaking havoc is to
select them in "File Types" and change the default action to "Edit" from
the usual "Open".  I don't use OE, but my mail client honours this
default action.  It's good policy anyway because then accidental double
clicking does not run the file - you have to right-click and select the
appropriate action (open or merge) to run it.
-- 
Tom
Technical Details
Message-ID: <QuUuoNAbbzE5EwsN@tgmead.demon.co.uk>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <Jaw4iIAg5VE5EwNK@hitechuk.demon.co.uk> <NAomfyA6JwE5Ewch@equipoise.demon.co.uk> <ZVFQ4.8098$E44.194907@news6-win.server.ntlworld.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 1036bc,cc294bbc93feefe4
X-Google-Attributes: gid1036bc,public
From: Tom <tom@nospam.demon.co.uk>
Subject: Re: Has anyone received the new "I LOVE YOU" Virus email yet ?
Date: 2000/05/05
Message-ID: <QuUuoNAbbzE5EwsN@tgmead.demon.co.uk>
X-Deja-AN: 619786088
X-NNTP-Posting-Host: tgmead.demon.co.uk:158.152.65.48
References: <Jaw4iIAg5VE5EwNK@hitechuk.demon.co.uk> <NAomfyA6JwE5Ewch@equipoise.demon.co.uk> <ZVFQ4.8098$E44.194907@news6-win.server.ntlworld.com>
X-Complaints-To: abuse@demon.net
X-Trace: news.demon.co.uk 957568822 nnrp-03:17194 NO-IDENT tgmead.demon.co.uk:158.152.65.48
Organization: None
MIME-Version: 1.0
Newsgroups: demon.tech.pc