Yes, Oulook does execute the vbscript in an html email message.  If it is
between the <script> and </script> tags, and you allow IE to run scripts, it
will run.

What is needed is the ability to *never* display html messages and show them
as an attachment so the user can decide to view it or not.

-----Original Message-----
From: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Date: Friday, May 05, 2000 2:19 PM
Subject: Re: [IMail Forum] LOVEYOU Virus, only MS Outlook?


>Outlook Express won't run VB script without the user telling it to (as far
as I know).  But, in preview mode or reading an E-mail, if the E-mail is in
HTML format, there is a certain Active-X control that can be used to do some
nasty stuff.  I can't remember offhand exactly what it is, but it is real.
I remember reading a warning about it, and thinking it was a hoax, but it is
true.
>                             -Scott
>
>---------- Original Message ----------------------------------
>From: "Jonathan Waldchen" <[EMAIL PROTECTED]>
>Reply-To: [EMAIL PROTECTED]
>Date: Fri, 5 May 2000 16:34:30 -0400
>
>Yes, but it was my understanding that VB script viruses do not need to be
>opened in Outlook Express preview mode. Does Preview mode run VB script
>without user intervention? Should I recommend that all my clients disable
>preview mode in OE?
>
>
>----- Original Message -----
>From: Angel Castillo <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Sent: Friday, May 05, 2000 3:10 PM
>Subject: RE: [IMail Forum] LOVEYOU Virus, only MS Outlook?
>
>
>> Preview on...doesn't open an attachment...people do  :-)
>>
>> I use the preview feature and no attachment opens up unless I do it.
>>
>> --------------------------------------------------------
>> Angel Castillo, MCSE, MCP+I    Jobs.com
>> IMail System Administrator          www.jobs.com
>> [EMAIL PROTECTED]                          Voice: (214) 273-7629
>> "When you love what you do...you're alive!"
>>
>>
>> -----Original Message-----
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED]]On Behalf Of
>> [EMAIL PROTECTED]
>> Sent: Friday, May 05, 2000 12:49 PM
>> To: [EMAIL PROTECTED]
>> Subject: Re: [IMail Forum] LOVEYOU Virus, only MS Outlook?
>>
>>
>> The ILOVEYOU virus isn't one that opens automagically (the type you are
>> referring to never made it to the wild, it was just a prototype; only
>> Outlook Express opens it automatically, if you have preview on).
>>
>> This virus will run on (and infect) any system that can run .VBS (Visual
>> Basic Scripting) file.  It will only spread, however, if you are running
>> Outlook (since it uses the Outlook address book to get the list of E-mail
>> addresses to send to).
>>                              -Scott
>>
>> ---------- Original Message ----------------------------------
>> From: "Keith Pillow" <[EMAIL PROTECTED]>
>> Reply-To: [EMAIL PROTECTED]
>> Date: Fri,  5 May 2000 13:08:49 -0400
>>
>> Is MS Outlook the only client that automagically runs this thing when a
>user
>> views the message? What other clients run this attachment without
>prompting?
>>
>>
>> --
>> Keith Pillow, CTO
>> Sylvan Information Services, Inc.
>> www.sylvaninfo.net
>> 84 Main Street Warsaw, Virginia 22572
>>
>> --
>> Please visit http://www.ipswitch.com/support/mailing-lists.html
>> to be removed from this list.
>>
>>
>> Please visit http://www.ipswitch.com/support/mailing-lists.html
>> to be removed from this list.
>>
>> Please visit http://www.ipswitch.com/support/mailing-lists.html
>> to be removed from this list.
>>
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

Reply via email to