At 12:02 PM 1/18/01 -0800 Rita wrote:
>1. Did I really have a worm?

i doubt it, but it's very possible if you use some version of Outlook.


>2. Is it possible the scripting caused InoculateIT to delete the good scripts?

Yes, but I have never heard of networking software using vbscript.


>3. Can I pass a worm in email. I sent some email out and never thought it might be 
>infected. Using another computer I discovered nobody had contracted the virus.

Yes, vbs worms could contain code to automatically send mail to everyone in your 
windows address book in order to spread itself and infect others.

> 
>I am now using my husbands computer until I can reformat.  Any help will be 
>appreciated. 
> 
>Rita


A lot of virus programs give false alarms especially when it comes to scripting.  My 
F-Secure usually just renames the file containing the script instead of deleting it.  
Even if the script is disabled inside an html message or some text file, most virus 
scanners will still detect it as harmful when in reality it can't even run in its 
current state.

If you did actually have a worm, it probably came via email.  You can still run 
scripting on your computer but you will have to trash Outlook for a more reliable / 
configurable MUA like Eudora.  An email program that doesn't use the IE engine to 
display the message.  Eudora can use either the Microsoft view or it's own viewer. It 
also has an option which strips all the script out of the message; just un-check 
"Allow Executables in HTML message" then you can still have vbscript installed but it 
will not run inside your mail program.

I am confused about what you mean by cleaning the registry.  Do you mean you clean the 
registry with some program like regclean?  If so, then this is should be a last resort 
and should not be run routinely. I've seen perfectly good system get trashed by 
running regclean and programs like regclean.

You have a virus.log file? Post it.



email:  [EMAIL PROTECTED]
www: http://pcnn.virtualave.net/
RSA KEY:  76B1 A850 6F40 2A25  0BE6 378E CDC9 6408

--- Sponsor's Message --------------------------------------
Need Tech Help?
Fret no more. Get quick answers on our Q&A tech forum!
http://click.topica.com/aaaa4Nb1dhsJb1LEkec/rebootmypc
------------------------------------------------------------

----
post: [EMAIL PROTECTED]
url: http://theMezz.com/informant
forum: http://theMezz.com/bbs
subscribe: [EMAIL PROTECTED]
unsubscribe: [EMAIL PROTECTED]
digest: [EMAIL PROTECTED]
notDigest: [EMAIL PROTECTED]

____________________________________________________________
T O P I C A  -- Learn More. Surf Less. 
Newsletters, Tips and Discussions on Topics You Choose.
http://www.topica.com/partner/tag01

Reply via email to