-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hello Screwyluie,
On Tue, 18 Sep 2001 at 14:17:55 [GMT -0700], you wrote:
S> these aren't the kinda people who use outlook express and they
S> never miss a patch... so it's a little more sneaky then one might
S> think
They musta missed this one. The malformed MIME header patch has been
available for a few months from Microsoft.
But to alleviate your fears, TB doesn't run anything unless you
explicitly tell it to do so. The fact that it is MIME munged to appear
as a WAV and not the readme.exe it really is, has little affect on TB. TB
doesn't run anything without your asking it to. This is one of the
biggest reasons we long time TB users have fought against the
inclusion of a full HTML rendering engine in TB.
Further, the worm affects only IIS 4.0 and IIS 5.0 and exploits a hole
called web server folder traversal. However, user PCs are a launching
pad for the worm via the oft used sending it to everyone in the
address book gig. Unpatched user PCs can also become "infected" by
visiting a web site running IIS that is infected, because IE will
download the worm from that web site.
The patch for IIS is:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms00-078.asp
To patch IE
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms01-020.asp
However, these are preemptive patches. If you're already infected,
you'll need to wait for a fix to be released.
Cheers,
Leif Gregory
- --
List Moderator (and fellow registered end-user)
PCWize Editor / ICQ 216395 / PGP Key ID 0x7CD4926F
Web Site <http://www.PCWize.com>
TB FAQ <http://www.silverstones.com/thebat/FAQ.html>
Using The Bat! 1.54 Beta/8 under Windows 98 4.10 Build 2222 A
on a Pentium III 500 MHz notebook with 256MB.
Tagline of the day:
IQ = dx / (1 + dx), where x = age.
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5i
iQA/AwUBO6fBiI8+1rl81JJvEQIJIgCgj3iZRjQ2cdENjFubi4VdVdp4QZkAoNYy
iVd2YbbG9vld3nLGc/QEg7Zk
=G7f2
-----END PGP SIGNATURE-----
S/MIME Cryptographic Signature
