From: "Blaine Hodge" Newsgroups: alt.comp.perlcgi.freelance,alt.freewebhosting,alt.html.critique,comp.os.msdos.djgpp References: <7vgr8g$iel$1 AT tron DOT sci DOT fi> <34UeOP1V1CvfYM8a+7LxX8dQ+AV6 AT 4ax DOT com> <382BC4F4 DOT ED174896 AT geocities DOT com> Subject: Re: 4 VIRUS ALERTS! Lines: 20 X-Newsreader: Microsoft Outlook Express 4.72.3612.1700 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3612.1700 Message-ID: Date: Fri, 12 Nov 1999 08:57:46 GMT NNTP-Posting-Host: 24.113.39.3 X-Complaints-To: abuse AT home DOT net X-Trace: news1.rdc1.bc.home.com 942397066 24.113.39.3 (Fri, 12 Nov 1999 00:57:46 PST) NNTP-Posting-Date: Fri, 12 Nov 1999 00:57:46 PST Organization: @Home Network Canada To: djgpp AT delorie DOT com DJ-Gateway: from newsgroup comp.os.msdos.djgpp Reply-To: djgpp AT delorie DOT com >I heard on the radio yesterday something about a virus called "Bubble Boy" or >something.. apparently it uses some loophole in the security .... dont know much >more... wouldnt this one.. (its new apparently) fall into this category? Yup, it uses VBScript (or JavaScript, one of the two). The script is executed when you read the e-mail, just like a HTML page. Only it gets access to your mail client and infects it. As I heard it's harmless (other than the fact it spreads). The scary part is that someone figrued out how todo it without needing the victim to open/execute an attachment. And if they did it, someone with a more malicious program can too. Mostly applicable to Outlook Express. Doubt that Netscape suffers from it as VBScript is a MS thing. - Blaine