

| Subject: | Re: Rumor of the day |
| From: | Jan Allbright |
| Date: | Tue, 6 Dec 94 13:11:12 PST |
>
> >Yes, but these executables have to be RUN in order to infect a machine,
> >right? I think this is where the confusion is. Just downloading
> >something through e-mail (and not running it) is an unlikely way to
> >"contract" a computer virus.
>
> This sounds to me like a DOS thing. You should always scan stuff with
> your favorite viral software before you run anything you get off BBS's and
> the net anyway.
It is rumors like this one that keep people like me in work (*sigh*)
a. The Internet Work sent a file, a decode and then an execuite
vie email (check the | command). No one ever read that mail. The
_bug_ in SMTP was the subject of a CERT advisory and all sendmail
code on all UNIX machines has been updated.
b. Viruses only attack via an execuatable...there are no viral GIFs
(for example). HOWEVER...running uudecode on something like
_vw.gif_ that is really /etc/passwd ... but if you permissions
are set correctly...this will not happen.
c. Getting code off BBS's is always risky...I always v_scan every thing
that comes within running distance of my machine...
Regards,
--
/----------------------------------+------------------------------------\
| Mr. Jan C. Allbright | Hewlett-Packard Company |
| North American Response Center | 100 Mayfield Ave. MS 37UM |
| UNIX Networks Group | Mountain View, Ca. 94043 |
| jallbrig@mayfield.hp.com | 415.691.3026 |
\--------------------(Opinions Expressed Are My Own)--------------------/Have something to add on this topic today? Revive this thread in the forum »