On Wed, 13 Dec 2000 19:56:41 -0500, L.D. Best wrote:

> Tom,

> The virus only affects certain people using windows.  It was attached to
> a message you probably didn't even get.

> The nice thing about Arachne is that it runs in DOS, and no one yet has
> found a way to force a DOS program to be run if you -- the user --
> doesn't actually tell it to run.

If you take a look through mime.cfg, you'll see some lines marked
"uncomment these for a Win 9.x style desktop ;-)". Don't. Sure enough,
some late night, the user will click on that executable attachment
before realizing it's an executable. This IS the same as "telling it to
run". Leave those lines commented, that way executables will come up
with "Arachne doesn't know how to handle"... . Gives ya a second to stop
and think whether it's a useful utility you requested, or perhaps a
virus you didn't.

All the same, it's a poor class of virus writers out lately. The ones
who know how to actually code (as opposed to using vb and scripts) have
moved on to other things and, for the time being, it seems no one is
replacing them. Good. But someone'll break the string sometime, so be
vigilant.


Bob

Starts April 1, 2001
-- Arachne V1.69, NON-COMMERCIAL copy, http://arachne.cz/

Reply via email to