From:	charles AT homer DOT pentek DOT com (Charles Krug)
Newsgroups:	comp.os.msdos.djgpp
Subject:	Re: Please help with Happy time virus
References:	<000001c0db2b$afa55aa0$64c8c8c8 AT rafek>
Message-ID:	<slrn9fvnuo.c84.charles@homer.pentek.com>
User-Agent:	slrn/0.9.6.3 (SunOS)
Lines:	27
Date:	Mon, 14 May 2001 13:38:33 GMT
NNTP-Posting-Host:	207.207.207.50
X-Complaints-To:	news AT netcarrier DOT com
X-Trace:	news.netcarrier.net 989847513 207.207.207.50 (Mon, 14 May 2001 09:38:33 EDT)
NNTP-Posting-Date:	Mon, 14 May 2001 09:38:33 EDT
Organization:	NetCarrier Internet Services
To:	djgpp AT delorie DOT com
DJ-Gateway:	from newsgroup comp.os.msdos.djgpp
Reply-To:	djgpp AT delorie DOT com

On Sat, 12 May 2001 20:13:56 +0200, Rafal Maj <maj_rafal AT poczta DOT onet DOT pl> wrote:
>I've just got this stupid appy Time virus from DJGPP news group. I deleted
>help.html files, and 1.html in C:\, and I set active desktop to Off. have I
>to do something more ? Is my OutLook 5.0 infected now ? Is it possible to
>track this f###### idiot & m##### f##### who posted this virus ?

First, NEVER post to USENET in anything but plain text.  There are exceptions
for lists with "binary" in the name, but by and large, NNTP is all about plain
text.

Second, never read from USENET in anything but plain text.  See above.

Third, your best line of defense against VBS viruses is to use a newsreader
that doesn't do VB.  I use slrn, which is free.

The next best thing (ans also a good idea) is to change the "Open with"
association of VB* files so that "Open" means "Open in notepad (or vim, if you
want a better editor)" and you have to explicitly tell Windows to run
something.

This won't make you fool proof, but it will guard against the default fools
who designed Outlook.

And while you're at it, get mutt for your mail reader.  


Charles

- Raw text -