RE: Virus Notification

[Vivek Mittal <pbmserver@vivekmittal.org>]

I agree with your comment about attachments.  A person has to execute an
attachment for it to run.  

However, I disagree about embedded scripts in HTML.  Most people I know who use
Outlook have it set up with a preview pane.  As soon as you click on the
message, even if to just delete it, Outlook will run any VBScript/Javascript
that might be embedded in the HTML message as it will render the message for the
second it took you to select the message and then click delete.  The way around
that is to either disable Javascript or not use the preview pane.

Vivek


Quoting Laurent Devigne <ldevigne@baan.com>:

> No you should thanks Outlook. 
> 
> The virus will not be executed autmatically by it, Outlook does not launch
> any attached file (executable, etc...) and do not execute any
> VBScript/Javascript if the HTML message contains one of them. However if
> "you" open the message and you execute the attached piece then the virus
> will use the Outlook Address Book, there is a big difference. 
> 
> So simply delete the message if it comes from "pbmserv@btinternet.com" and
> the virus will not be executed and will not infect your computer.
> 
> Laurent
> 
> -----Original Message-----
> From: Jacques Foury [mailto:foury@free.fr]
> Sent: Tuesday, October 08, 2002 08:28
> To: pbmserv-users@gamerz.net
> Subject: Re: Virus Notification
> 
> 
> Gal-on Broner wrote:
> 
> >BugBear is a new virus and is very active. Out network blocked more then
> >1000(!) incoming messages of the virus. It uses the address book of
> outlook
> >to submit additional messages, and uses subject lines from previous mail
> >items to make them look innocent. The bug is being captured only with
> recent
> >updates of the major anti-virus programs, so make sure you update.
> >
> >Gal-on.
> >  
> >
> we must launch a crusade against Outlook, it's a nest for email viruses !!!
> 
> 
> 
> To unsubscribe, send a message to esquire@gamerz.net with
> 	unsubscribe pbmserv-users@gamerz.net
> as the BODY of the message.  The SUBJECT is ignored.
>