Hallo Marck,
On Wed, 20 Dec 2000 16:11:29 +0000 GMT (21/12/2000, 00:11 +0800 GMT),
Marck D. Pearlstone wrote:
DM>> What I want to know is about its virus protection system and spam
DM>> mail. OE is targetted for viruses (using its address book) either
DM>> b/c it is known or vulnerable or both. Is The Bat address book and
DM>> file attachment system and whatever else makes email programs
DM>> susceptible better protected again virus proliferation?
MDP> Completely! TB does not respond to "GET" requests in HTML mail so you
MDP> are protected in that way. TB does not auto-execute any attachments.
MDP> If you attempt to launch a suspicious attachment, TB will warn you in
MDP> no uncertain terms that you are running a risk of viral infection.
OK, here we go: I got infected by the JS_SEEKER.A trojan (File Name:
RUNME.HTA - what does an .HTA extension normallly do?). I got
suspicious two days ago when I suddenly had unusual activity on port
8431, and closed that port for further investigation after Christmas.
This morning, I updated PC-Cillin, and a few minutes ago, I suddenly
had a virus warning pop up: the above trojan was active from a file in
my backup directory to The Bat!\Mail\Mailing Lists\Attach. An
immediate virus scan detected this trojan also in the current
database. (The virus was not sent through this Mailing List, but
others to which I subscribe do allow attachments.)
So this is some malware that becomes active through some trigger other
than double-clicking on it, and thus TB cannot prevent it. I repeat:
TB does not substitute a regularly updated anti-virus program.
Oh, and I recommend updating "now" to everybody, as this thing is new
and had not been detected by the pattern updated on 19 December.
--
Cheers,
Thomas.
In a Yugoslavian hotel: The flattening of underwear with
pleasure is the job of the chambermaid.
Message reply created with The Bat! 1.48f
under Chinese Windows 98 4.10 Build 1998
using an Intel Celeron 366Mhz, 128MB RAM
--
--------------------------------------------------------------
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
<mailto:[EMAIL PROTECTED]>
To Unsubscribe from TBUDL, double click here and send the message:
<mailto:[EMAIL PROTECTED]>
--------------------------------------------------------------
You are subscribed as : [email protected]
