Article View: demon.tech.pc
Article #22819Re: Has anyone received the new "I LOVE YOU" Virus email yet ?
From: Tom
Date: Fri, 05 May 2000 00:00
Date: Fri, 05 May 2000 00:00
39 lines
2477 bytes
2477 bytes
In article <ZVFQ4.8098$E44.194907@news6-win.server.ntlworld.com>, barry.morgan <barry.morgan@ntlworld.com> writes > >Tim Gowen <tim@nospam.demon.co.uk> wrote in message >news:NAomfyA6JwE5Ewch@equipoise.demon.co.uk... >> >> I've just seen the 6 O'Clock news, and a man at the Manilla-based ISP >> claims that he'd stopped a second, more harmful virus, which "could have >> enabled others to gain access to people's computers, steal credit card >> numbers and state secrets." > >Having said that, there are now copy-cat versions going about :-( > >> Sounds a bit too much to be true. Gaining access to computers, yes, but >> the rest seemed a bit alarmist. > >Dunno how deep a vbs script can go into the system, presume it's possible >since it is allowed to modify the registry. > >> And if he stopped that one - which was imbedded in the first - how come >> he couldn't stop the first. I think the problem here is that the >> journalists don't know what they're saying, and tend to not go into >> enough detail. > >Or make it up if the story hasn't enough *meat* in it !!!! > >Have heard that disabling Windows Scripting Host stops these sort of attacks >in the first place. Any comment anyone - I've done it anyway just in case >:-) > I'm not sure exactly how the file is invoked from OE, but the normal way of preventing stray .js, .vbs and .reg files from wreaking havoc is to select them in "File Types" and change the default action to "Edit" from the usual "Open". I don't use OE, but my mail client honours this default action. It's good policy anyway because then accidental double clicking does not run the file - you have to right-click and select the appropriate action (open or merge) to run it. -- Tom
Technical Details
Message-ID:
<QuUuoNAbbzE5EwsN@tgmead.demon.co.uk>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<Jaw4iIAg5VE5EwNK@hitechuk.demon.co.uk> <NAomfyA6JwE5Ewch@equipoise.demon.co.uk> <ZVFQ4.8098$E44.194907@news6-win.server.ntlworld.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 1036bc,cc294bbc93feefe4 X-Google-Attributes: gid1036bc,public From: Tom <tom@nospam.demon.co.uk> Subject: Re: Has anyone received the new "I LOVE YOU" Virus email yet ? Date: 2000/05/05 Message-ID: <QuUuoNAbbzE5EwsN@tgmead.demon.co.uk> X-Deja-AN: 619786088 X-NNTP-Posting-Host: tgmead.demon.co.uk:158.152.65.48 References: <Jaw4iIAg5VE5EwNK@hitechuk.demon.co.uk> <NAomfyA6JwE5Ewch@equipoise.demon.co.uk> <ZVFQ4.8098$E44.194907@news6-win.server.ntlworld.com> X-Complaints-To: abuse@demon.net X-Trace: news.demon.co.uk 957568822 nnrp-03:17194 NO-IDENT tgmead.demon.co.uk:158.152.65.48 Organization: None MIME-Version: 1.0 Newsgroups: demon.tech.pc