[Am-info] E-mail virus picks up speed
Mike Stephen
mikestp@telus.net
Thu, 02 Jan 2003 19:27:56 -0800
--_=_=_=IMA.BOUNDARY.HTML_0473368=_=_=_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
There is something of note about this particular virus (as well as many others like it).
If you, as a computer geek friend, convince your aquaintenances to dump Outlook as an emailer, and go with
PMMail or Eudora, there is still something you really must do in addition. After you migrate the client off the
outlook mail and address book, you really must delete all the email address information from the WAB
(Windows Address Book). These virus types have their own SMTP mailer and do not require the use of
outlook as the mailing engine. You can turn outlook off as your default emailer but if the WAB exists, and has
addresses in it, that might be left over from earlier use of outlook, then all the addresses will get copies of your
virus. This would occur if you ever executed any of the virus emails. Even if you have disabled Outlook.
In short, clear out the WAB.
On Thu, 2 Jan 2003 20:56:21 -0600, Roy Bixler wrote:
>On Thu, Jan 02, 2003 at 08:42:45PM -0500, Erick Andrews wrote:
>> Ho, hum. Aren't you glad you don't use Windows?
>>
>> http://news.bbc.co.uk/2/hi/technology/2621419.stm
>>
>> The virus is a version of the Yaha worm which first appeared in
>> February.
>The nicest part of this article is the beginning:
> A new virus which first appeared just before Christmas is
> infecting thousands of computers across the world.
> The spread of the Windows e-mail worm, called Yaha.K, has led
> anti-virus firms to classify it as a high risk.
>They actually explicitly mention that it's a Windows virus. They
>didn't mention that in past articles, so it's nice to see it now. I
>hope they make it a regular pattern to mention the platform the virus
>needs in order to spread.
>R.
>_______________________________________________
>Am-info mailing list
>Am-info@lists.essential.org
>http://lists.essential.org/mailman/listinfo/am-info
--_=_=_=IMA.BOUNDARY.HTML_0473368=_=_=_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
<HTML>
<FONT SIZE="4" POINTSIZE="14" DEFAULT="SIZE">There is something of note about this particular virus (as well as many others like it). <BR>
<BR>
If you, as a computer geek friend, convince your aquaintenances to dump Outlook as an emailer, and go with PMMail or Eudora, there is still something you really must do in addition. After you migrate the client off the outlook mail and address book, you really must delete all the email address information from the WAB (Windows Address Book). These virus types have their own SMTP mailer and do not require the use of outlook as the mailing engine. You can turn outlook off as your default emailer but if the WAB exists, and has addresses in it, that might be left over from earlier use of outlook, then all the addresses will get copies of your virus. This would occur if you ever executed any of the virus emails. Even if you have disabled Outlook.<BR>
<BR>
In short, clear out the WAB.<BR>
<BR>
<BR>
On Thu, 2 Jan 2003 20:56:21 -0600, Roy Bixler wrote:<BR>
<BR>
>On Thu, Jan 02, 2003 at 08:42:45PM -0500, Erick Andrews wrote:<BR>
>> Ho, hum. Aren't you glad you don't use Windows?<BR>
>> <BR>
>> <FONT COLOR=0000ff><U>http://news.bbc.co.uk/2/hi/technology/2621419.stm<FONT COLOR=000000 DEFAULT="COLOR"></U><BR>
>> <BR>
>> The virus is a version of the Yaha worm which first appeared in<BR>
>> February.<BR>
><BR>
>The nicest part of this article is the beginning:<BR>
><BR>
> A new virus which first appeared just before Christmas is<BR>
> infecting thousands of computers across the world.<BR>
><BR>
> The spread of the Windows e-mail worm, called Yaha.K, has led<BR>
> anti-virus firms to classify it as a high risk.<BR>
><BR>
>They actually explicitly mention that it's a Windows virus. They<BR>
>didn't mention that in past articles, so it's nice to see it now. I<BR>
>hope they make it a regular pattern to mention the platform the virus<BR>
>needs in order to spread.<BR>
><BR>
>R.<BR>
>_______________________________________________<BR>
>Am-info mailing list<BR>
><FONT COLOR=0000ff><U>Am-info@lists.essential.org<FONT COLOR=000000 DEFAULT="COLOR"></U><BR>
><FONT COLOR=0000ff><U>http://lists.essential.org/mailman/listinfo/am-info<FONT COLOR=000000 DEFAULT="COLOR"></U><BR>
<BR>
</HTML>
--_=_=_=IMA.BOUNDARY.HTML_0473368=_=_=_--