From: charles AT homer DOT pentek DOT com (Charles Krug) Newsgroups: comp.os.msdos.djgpp Subject: Re: Please help with Happy time virus References: <000001c0db2b$afa55aa0$64c8c8c8 AT rafek> Message-ID: User-Agent: slrn/0.9.6.3 (SunOS) Lines: 27 Date: Mon, 14 May 2001 13:38:33 GMT NNTP-Posting-Host: 207.207.207.50 X-Complaints-To: news AT netcarrier DOT com X-Trace: news.netcarrier.net 989847513 207.207.207.50 (Mon, 14 May 2001 09:38:33 EDT) NNTP-Posting-Date: Mon, 14 May 2001 09:38:33 EDT Organization: NetCarrier Internet Services To: djgpp AT delorie DOT com DJ-Gateway: from newsgroup comp.os.msdos.djgpp Reply-To: djgpp AT delorie DOT com On Sat, 12 May 2001 20:13:56 +0200, Rafal Maj wrote: >I've just got this stupid appy Time virus from DJGPP news group. I deleted >help.html files, and 1.html in C:\, and I set active desktop to Off. have I >to do something more ? Is my OutLook 5.0 infected now ? Is it possible to >track this f###### idiot & m##### f##### who posted this virus ? First, NEVER post to USENET in anything but plain text. There are exceptions for lists with "binary" in the name, but by and large, NNTP is all about plain text. Second, never read from USENET in anything but plain text. See above. Third, your best line of defense against VBS viruses is to use a newsreader that doesn't do VB. I use slrn, which is free. The next best thing (ans also a good idea) is to change the "Open with" association of VB* files so that "Open" means "Open in notepad (or vim, if you want a better editor)" and you have to explicitly tell Windows to run something. This won't make you fool proof, but it will guard against the default fools who designed Outlook. And while you're at it, get mutt for your mail reader. Charles