Virus Read Immediately!

[jthorpe]

http://www.msnbc.com/news/630583.asp?0cm=c10



This one is nasty. Read the whole story.

 

[Joe G.]

I got a notice about that one from AVG. It's another one that uses Outlook Express to do its dirty work. Almost all of these virus use OE so why use the thing for your e-mail? Doesn't make any sense at all when there are other e-mail programs available. I installed AVG and found that it does not even have any other e-mail program in it's dictionary. I still use AVG once a day to check my system but so far no virus found so far.

 

[jthorpe]

Joe,



The virus is actually much worse than just email. It spreads 3 ways and is very nasty.



1. The virus can be spread to a computer just by surfing the web. An infected web server will run a javascript on your computer and your computer will download the appropriate files for the virus without you even knowing it. Once this is done, it will run and send email to all of the people in your address book on Outlook Express or Outlook. On top of that, your computer will attempt to infect other webservers on the same IP octet range as yours.



2. Spread via email as you mentioned. If you open an email with the appropriate attachment, the virus will put itself on your computer and run like point 1. Keep in mind that this virus can work without you even opening the attachment! This is bad bad news. If you see ANYTHING suspicious, delete it. Also, this virus changes the subject headers and changes the filename of the virus at random so you may not know what you're looking for. On top of that, it will most likely come from someone you know.



3. It can be spread to web servers much in the same manner as code Red. Directly from other webservers doing port scans, or from the email infected users.



Some precautions you should all take immediately.



1. Turn off Java on your web browser and curtail browsing, or stop browsing completely.



2. If you're going to keep browsing, check http://www.cert.org for the latest updates as well as http://www.symantec.com. They have the most up to date info. on the virus.



3. Don't open emails that you think may be suspicious, even if you know who it's coming from. They may also be infected.



4. Keep checking the news sites as they will have updated info. as well.



5. Disable html on your email client, especially if you're using outlook or outlook express.



6. STAY AWAY FROM NEWSGROUPS!!!!! THIS CAN BE BAD NEWS if your client is setup for html etc.



I'll keep you guys up to date as I get info. Good luck!



Jack

 

[Joe G.]

Jack,



From what I read Outlook or Outlook Express is required to send the virus from users like us. I have IE and OE on my computer but OE has no one in the address book. Once in a while I need IE to do something on a web site that is using something that requires it. Loading an avatar on this site for example. I never start the lousy excuse for an e-mail program. Even if it is launched by another program there is nothing in the address book to send anything to.



I also run the complete scan by EVG (which I keep updated) on a regular basis. So far it has found no infections of any kind.



My other hobby is genealogy so I send and receive a LOT of e-mails with attachments. I also visit a lot of genealogy web sites. If I receive an e-mail with an unexpected attachment that is not referenced in the text of the message I send an e-mail asking about it before opening it.



I use Netscape because I like the browser a LOT better. Even if someone wants to use IE there are other e-mail programs that are written to work well with it. It just doesn't make any sense to use a virus magnet like OE.

 

[jthorpe]

Joe, to send the attachment, yes, Outlook or OE is required but you're still not safe because if you browse an infected site with IE or Netscape, the javascript is still going to send you the virus, and your computer will do port scans in the same class A range in its search for computers to infect. Just because you're not using those, there is still a possibility of infections. Just watchout when browsing.

 

[Joe G.]

Jack,



From what I read it looks like this thing is a Windows 2000 thing. Like the Code Red except now personal systems are now included as targets. So guys like me running W98 should be ok no matter what we do. Is that correct?

 

[WOWZY]

I did the update this morning and that should take care of it.



Those that are running the AVG6. 0 go to the AVG control center and click your update manager and remember to restart your computer.

 

[RobMitch]

Originally posted by Joe G.

Jack,



From what I read it looks like this thing is a Windows 2000 thing. Like the Code Red except now personal systems are now included as targets. So guys like me running W98 should be ok no matter what we do. Is that correct?

... ... ... ... ... ... ... ...

Sorry joe, I don't think that's so. This link to McAffee says it will effect 95 & 98 also.

http://www.mcafee.com/anti-virus/viruses/nimda/default.asp

 

[Joe G.]

It appears that it will infect W95 and W98 if you have set up the multi-user environment; ie. shared drives may be used. I haven't done that. The only person I know that has is my son-in-law. I still say in order to minimize your exposure to viruses don't use Outlook or Outlook Express.