Unsolicited email

brembo · Post by **brembo** » Sun Oct 21, 2001 10:02 pm

I get some emails that I don't want, and I just zap em into the deleted folder. Well I just stumbled onto a new beast. When I was going up the line deleting files, I highlighted one, and the damn thing opened a web page. Boom! There it was, scared me silly. Ran a full system scan to make sure that bit o' nastiness didn't drop a worm/virus on me. Now what I wanna know is, COULD it have zapped me with a virus? I didn't open the thing, just in the process of deleting it. If someone did figure out how to send a nasty that way, we'd all be in trouble. Any experience in this realm?

blebs · Post by **blebs** » Sun Oct 21, 2001 10:53 pm

It's possible, however I don't think it would be very likely. It's kind of along the line of what MartianGod had posted about a while back. Sorry, I keep thinking it was the Nimda virus, but I don' t think that was the one. Anyway, just by viewing the infected webpage, you could be infected too. This mostly applies to servers, but I look for someone to be able to do that to anyone. As long as your virus definitions are up to date, your AV should (key word=should) pick anything nasty off right away.

brembo: I just checked martiangods posts and it was the Nimda Virus that we were getting, just by viewing the page.

DesertFox · Post by **DesertFox** » Thu Nov 01, 2001 6:49 pm

Originally posted by blebs99

It's possible, however I don't think it would be very likely. It's kind of along the line of what MartianGod had posted about a while back. Sorry, I keep thinking it was the Nimda virus, but I don' t think that was the one. Anyway, just by viewing the infected webpage, you could be infected too. This mostly applies to servers, but I look for someone to be able to do that to anyone. As long as your virus definitions are up to date, your AV should (key word=should) pick anything nasty off right away.

brembo: I just checked martiangods posts and it was the Nimda Virus that we were getting, just by viewing the page.

Nimda can only infect you through IE if you have a version older than 5.5 Anything newer (like 6) and it can't infect through the browser.

blebs · Post by **blebs** » Thu Nov 01, 2001 6:55 pm

Originally posted by DesertFox

Nimda can only infect you through IE if you have a version older than 5.5 Anything newer (like 6) and it can't infect through the browser.

Yes that's true, but none the less, it kept setting our virus scanners off as though infecting us.

Croc · Post by **Croc** » Thu Nov 01, 2001 7:15 pm

Isn't there a requirement to have SP2 installed on IE5.5 before you have the needed protection for Nimda?
check your copy of IE and make sure SP2 is installed. SP1 will not save you!!!!

LOL, just checked mine ...

...... SP1

Croc

TonyT · Post by **TonyT** » Fri Nov 02, 2001 11:36 am

If you are usin OE and also the Preview Pane mode, the html email will display in the preview pane. That html email probably had an activeX control embeded in it that is set to open a new window onClose of current window, just like certain webpages do it.

Not to worry, a webpage cannot install a virus if your security updates are current.

Check out c\windows\downloaded program files for new oddball avtiveX controls & clear the TIF folder. If you remember the name of the email/website then add it to the restricted sites zone in IE.