|
PureBytes Links
Trading Reference Links
|
<x-html><!doctype html public "-//w3c//dtd html 4.0 transitional//en">
<html>
<body bgcolor="#FFFFFF">
I have had trouble with the KaK virus in the last few days. I use netscape
and it only showed up when I dried to REPLY to a mails from one sender
only, and there were no attachments. I have the latest Nortons.
<br>I had them update their virus software and when they sent me a message
to say all clear again the virus showed up when I tried to REPLY.
<br>Is this the normal action or the KaK virus and Nortons?
<br>I have never had a virus problem before.
<p>Doug
<p>JW wrote:
<blockquote TYPE=CITE><style></style>
<span class=150484018-04052000><font color="#0000FF"><font size=-1>This
is not correct. Opening has different meanings (like the word "IS"
does for Bill Clinton <g>). If the virus package is in an attachment,
then viewing the message does not open the virus attachment and there is
no exposure UNLESS you open the attachment. If the message is a text
message with the attachment then no harm is done by viewing the text message
in the viewer pane (although there has been some talk of a way to include
a virus in a text message but I won't go into the details here - the probability
of doing this is exceedingly low). </font></font></span><span
class=150484018-04052000></span><span class=150484018-04052000><font color="#0000FF"><font size=-1>The
real exposure with email viewing comes form viruses driven by scripts (active-x
or java) in HTML format emails. I use Outlook 2000, but I believe
that Outlook Express is similar. Go to Tools|Options. Click
on the Security tab. In the Secure Content area select the RESTRICTED
zone. You can then click on zone settings to see the settings that
are enabled. You have the opportunity to customize these settings,
for example, prompting you to allow download of active-x controls instead
of auto blocking them, etc.</font></font></span><span
class=150484018-04052000></span><span class=150484018-04052000><font color="#0000FF"><font size=-1>But
you won't know if an attachment contains a virus unless you are running
a virus scanning program that can tell you. Two days ago, I got a
virus worm delivered to me. It was a the (South Park) pretty worm.exe.
I suspected it was a virus package and confirmed it when I tried to save
the attachment to my hard disk. McAfee AV informed me of the virus
name. Of course, AV programs are only useful if you update your signatures
on a regular basis. I do so weekly.</font></font></span><span
class=150484018-04052000></span><span
class=150484018-04052000></span><font size=-1>JW</font>
<blockquote style="MARGIN-RIGHT: 0px">
<div class="OutlookMessageHeader" dir="ltr"><font face="Tahoma"><font size=-1>-----Original
Message-----</font></font>
<br><font face="Tahoma"><font size=-1><b>From:</b> listmanager@xxxxxxxxxxxxxxx
[mailto:listmanager@xxxxxxxxxxxxxxx]<b>On Behalf Of </b>Dick Crotinger</font></font>
<br><font face="Tahoma"><font size=-1><b>Sent:</b> Thursday, May 04, 2000
10:41 AM</font></font>
<br><font face="Tahoma"><font size=-1><b>To:</b> <realtraders@xxxxxxxxxxxxxxx></font></font>
<br><font face="Tahoma"><font size=-1><b>Subject:</b> [RT] Re: Question
about viruses</font></font>
<br> </div>
Outlook Express has to open the message to show it in the viewer.
Once you've seen a message with a virus (but only this particular kind,
for example, the Kak worm), you're hosed... ... unless you protect
yourself. Go to www.microsoft.com/update
and load in the currently available "required" updates to your system.
This may take a while, but part of it will fix the bug(s) in Internet Explorer
which allow this problem to exist. Then, when you view a virus infected
message in the viewer, an alert will pop up to the effect that the message
is infected, but the virus is not instantiated. Good luck... Dick
Crotinger
<blockquote
style="BORDER-LEFT: #000000 2px solid; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px; PADDING-LEFT: 5px; PADDING-RIGHT: 0px">
<div style="FONT: 10pt arial">----- Original Message -----</div>
<div
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><b>From:</b>
<a href="mailto:bogeybunky@xxxxxxxxxxxx"; title="bogeybunky@xxxxxxxxxxxx">Bill
Daniel</a></div>
<div style="FONT: 10pt arial"><b>To:</b> realtraders@xxxxxxxxxxxxxxx</div>
<div style="FONT: 10pt arial"><b>Sent:</b> Thursday, May 04, 2000 10:10
AM</div>
<div style="FONT: 10pt arial"><b>Subject:</b> [RT] Question about viruses</div>
<b><font face="Arial"><font color="#000080"><font size=-1>In Outlook
Express there is a preview window that shows the contents of an e-mail.
Is this the same as opening the e-mail and thus exposing your system to
potential infection or do you actually have to open the message for reading
to be at risk?</font></font></font></b> <b><font face="Arial"><font color="#000080"><font size=-1>Thanks</font></font></font></b> <b><font face="Arial"><font color="#000080"><font size=-1>Bill</font></font></font></b></blockquote>
</blockquote>
</blockquote>
</body>
</html>
</x-html>From ???@??? Fri May 05 06:51:58 2000
Return-Path: <listmanager@xxxxxxxxxxxxxxx>
Received: from mail.pajo.com (mail.pajo.com [216.116.96.4])
by purebytes.com (8.9.3/8.9.3) with ESMTP id BAA13447
for <neal@xxxxxxxxxxxxx>; Fri, 5 May 2000 01:51:05 -0700
Received: from REALTRADERS.COM ([208.179.56.198])
by mail.pajo.com (8.9.1a/8.9.0) with ESMTP id BAA12167;
Fri, 5 May 2000 01:50:11 -0700
Received: from proxy4.ba.best.com by realtraders.com
with SMTP (MDaemon.v3.0.3.R)
for <realtraders@xxxxxxxxxxxxxxx>; Fri, 05 May 2000 01:41:08 -0700
Received: from ABPSYS1 (dynamic50.pm02.san-mateo.best.com [205.149.174.114])
by proxy4.ba.best.com (8.9.3/8.9.2/best.out) with SMTP id BAA05521
for <realtraders@xxxxxxxxxxxxxxx>; Fri, 5 May 2000 01:42:54 -0700 (PDT)
From: "JW" <jw@xxxxxxxxxxxx>
To: <realtraders@xxxxxxxxxxxxxxx>
Subject: [RT] RE: RE: Re: Question about viruses
Date: Fri, 5 May 2000 01:43:21 -0700
Message-ID: <LPBBIKLFNLAMNNMLDELPAEKFCCAA.jw@xxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600
In-Reply-To: <005e01bfb606$8ddd1ac0$c48e0b3f@xxxxxx>
Importance: Normal
X-MDaemon-Deliver-To: realtraders@xxxxxxxxxxxxxxx
X-Return-Path: jw@xxxxxxxxxxxx
X-MDRcpt-To: realtraders@xxxxxxxxxxxxxxx
Sender: listmanager@xxxxxxxxxxxxxxx
Precedence: bulk
X-MDMailing-List: realtraders@xxxxxxxxxxxxxxx
X-MDSend-Notifications-To: listmanager@xxxxxxxxxxxxxxx
Reply-To: jw@xxxxxxxxxxxx
Status:
Sorry you have taken offense at my correction. I haven't looked at the pointer to the MS
update but MS software NEVER warns about any particular viruses. I believe that the
update just turns on the restricted zone at the default settings which will either block
or warn you that an active-x or java script wants to run (not sure what setting is the
default). But not all scripts contain a virus package, just a potential to do so. So all
you are getting when you "see the virus occasionally" is a warning that there is a script
or java app that wants to execute out of an HTML message. Again, that does not mean that
there is a virus there. ALL scripts and java apps are blocked, good or bad.
As to running a background scanner or not, I at least hope that that you do run some sort
of AV scan at some time whether in the background or at some later time. The problem I
have with running at a later time is I multi-task and would forget to run it. An AV
scanner only takes a few percent out of a computer and is good insurance. As I stated,
the other day, my AV software automatically caught the recent worm package sent to me when
I tried to save the attachment.
JW
-----Original Message-----
From: Dick Crotinger [mailto:dangle@xxxxxxx]
Sent: Thursday, May 04, 2000 1:14 PM
To: jw@xxxxxxxxxxxx
Cc: realtraders@xxxxxxxxxxxxxxx
Subject: Re: [RT] RE: Re: Question about viruses
>>This is not correct. <<
Well, JW, I beg to differ, but won't get into a pissing contest about it.
Some of what you said was correct, but I stand by what I posted.
If Outlook Express users will apply the Microsoft upgrade, as I suggested,
they will not be bothered by the virus which Bill Daniel was asking about.
I see the virus occasionally (rarely) when I view an infected message in my
viewing pane, and KNOW that Outlook Express will detect and identify this
virus and keep it from infecting my system. It doesn't do that with viruses
in attachments, of course, but that's not what Bill was asking about.
And I don't run any virus scanners in the background.
thanks,
Dick Crotinger
|