RE: Possibility for a Javascript based virus affecting Outlook

--openmail-part-093ed45c-00000001

Content-Type: text/plain; charset=US-ASCII; name="BDY.TXT"
Content-Disposition: inline; filename="BDY.TXT"
Content-Transfer-Encoding: 7bit

> I'm not sure if this is a hoax or not, but after the ILoveYou
> fiasco, better
> safe
> than sorry. I do know that JavaScript can hook OS files, but
> I would think
> that you would need to open the e-mail to make it work. In any case,
> do with the information what you will.
>
> Dan Peacock
>
> > -----Original Message-----
> > From: Bullen, Mark [SMTP:Bullen.Mark_at_broadband.att.com]
> > Subject: Possibility for a Javascript based virus
> affecting Outlook
> >
> > Now for something truly scary (if you're using MS Outlook)
> from the world of computer viruses.
> >
> > Check out the following story.
> >
> >

http://www.herald.co.nz/storydisplay.cfm?storyID=138622&thesection=techn ol
> og

Hi all,

VIRUSES CAN SPREAD WITHOUT OPENING ATTACHMENTS!! There is a new worm (benign at this time) called KAK which can spread using Outlook even when the attachment is not opened!

Apologies for cross-posting to ORACLE-L list as well, but I think the following page is worth visting. Please go to "http://www.sans.org/newlook/alerts/virus.htm". For a list of Top 10 vulnerabilities (created by consensus) go to "http://www.sans.org/topten.htm".

I would switch off the Preview option in Outlook if I were you!

John Kanagaraj
Brunei Shell Petroleum
http://www.geocities.com/john_sharmila

God so loved the world that He didn't send a committee! (See John 3:16 for details)
** Opinions expressed here are solely mine and not necessarily those of my employer **

--openmail-part-093ed45c-00000001

Content-Type: application/ms-tnef; name="WINMAIL.DAT"
Content-Disposition: attachment; filename="WINMAIL.DAT"
Content-Transfer-Encoding: base64

eJ8+ImGbAQaQCAAEAAAAAAABAAEAAQeQBgAIAAAA5AQAAAAAAADoAAEIgAcAGAAAAElQTS5N aWNyb3NvZnQgTWFpbC5Ob3RlADEIAQ2ABAACAAAAAgACAAEDkAYADAAAAAEAAAADABcAAQAA ABwAAQOQBgAMAAAAAQAAAAMANgAAAAAAOgABBIABAD8AAABSRTogUG9zc2liaWxpdHkgZm9y IGEgSmF2YXNjcmlwdCBiYXNlZCB2aXJ1cyBhZmZlY3RpbmcgT3V0bG9vawD3FgEDkAYADAAA AAEAAAALAAIAAQAAAA8AAQOQBgAMAAAAAQAAAAsAKwAAAAAANwABA5AGAAwAAAABAAAAAwAu AAAAAAAyAAEDkAYAFAAAAAEAAAACATEAAQAAAAEAAAAAAAAANwABA5AGABAAAAABAAAAQAA5 AJDMtNpdzL8BTQUBA5AGACQAAAABAAAAHgBCAAEAAAASAAAASm9obiBKLiBLYW5hZ2FyYWoA AAA7BgEDkAYAEAAAAAEAAABAAEgA0Ag83F3MvwFiBAEDkAYATAAAAAEAAAAeAHAAAQAAADsA AABQb3NzaWJpbGl0eSBmb3IgYSBKYXZhc2NyaXB0IGJhc2VkIHZpcnVzIGFmZmVjdGluZyBP dXRsb29rAADRFgEDkAYAKAAAAAEAAAACAXEAAQAAABYAAAABv8xd2pqRTHh3OBIR1JNOAGCX mRGzAAAZCgEDkAYADAAAAAEAAAADAAYQlEhDyQICAQOQBgAMAAAAAQAAAAMABxB6BAAAmQAB A5AGAHgAAAABAAAAHgAIEAEAAABlAAAASU1OT1RTVVJFSUZUSElTSVNBSE9BWE9STk9ULEJV VEFGVEVSVEhFSUxPVkVZT1VGSUFTQ08sQkVUVEVSU0FGRVRIQU5TT1JSWUlET0tOT1dUSEFU SkFWQVNDUklQVENBTkhPTwAAAAA6HgEDkAYADAAAAAEAAAADABAQAQAAACUAAQOQBgAMAAAA AQAAAAMAERAAAAAAJQABA5AGABQAAAABAAAAHgBCEAEAAAABAAAAAAAAAHMAAQOQBgAQAAAA AQAAAEAABzDQptGpXMy/AVAFAQOQBgAQAAAAAQAAAEAACDDQptGpXMy/AVEFAQOQBgAgAAAA AQAAAAIBCzABAAAAEAAAAHV4TJESONQRk04AYJeZEbN+BgEDkAYADAAAAAEAAAADAN4/r28A AD8CAQOQBgAkAAAAAQAAAAMA5oMIIAYAAAAAAMAAAAAAAABGAAAAABCFAAAAAAAANgMBA5AG ACQAAAABAAAAAwDngwggBgAAAAAAwAAAAAAAAEYAAAAAAYUAAAAAAAAoAwEDkAYAJAAAAAEA AAADAOiDCCAGAAAAAADAAAAAAAAARgAAAAARhQAAAAAAADkDAQOQBgAkAAAAAQAAAAMA6YMI IAYAAAAAAMAAAAAAAABGAAAAAFKFAADjFQAAcwQBA5AGACwAAAABAAAAHgDqgwggBgAAAAAA wAAAAAAAAEYAAAAAVIUAAAEAAAAEAAAAOC41ADkEAQOQBgAkAAAAAQAAAAsA64MIIAYAAAAA AMAAAAAAAABGAAAAAAaFAAAAAAAAOQMBA5AGACQAAAABAAAACwDsgwggBgAAAAAAwAAAAAAA AEYAAAAADoUAAAAAAABCAwEDkAYAJAAAAAEAAAADAO2DCCAGAAAAAADAAAAAAAAARgAAAAAY hQAAAAAAAEUDAQOQBgAsAAAAAQAAAB4A7oMIIAYAAAAAAMAAAAAAAABGAAAAADaFAAABAAAA AQAAAAAAAACBAwEDkAYALAAAAAEAAAAeAO+DCCAGAAAAAADAAAAAAAAARgAAAAA3hQAAAQAA AAEAAAAAAAAAgwMBA5AGACwAAAABAAAAHgDwgwggBgAAAAAAwAAAAAAAAEYAAAAAOIUAAAEA AAABAAAAAAAAAIUDAQOQBgAkAAAAAQAAAAsA8YMLIAYAAAAAAMAAAAAAAABGAAAAAACIAAAA AAAAPwMBA5AGACQAAAABAAAACwDygwsgBgAAAAAAwAAAAAAAAEYAAAAABYgAAAAAAABFAwED kAYAGAAAAAEAAAAeAD0AAQAAAAUAAABSRTogAAAAAFMBAQOQBgAMAAAAAQAAAAMAgBD///// kAQBCQAEAAIAAAAAAAAAAQOQBgAMAAAAAQAAAAsAIwAAAAAALwABA5AGAAwAAAABAAAACwAp AAAAAAA1AAEEkAYAqAUAAAMAAAAQAAAAAwAAMAQAAAALAA8OAAAAAAIB/w8BAAAAVwAAAAAA AACNVUzQ7DwRzoH/CAAJsQN6AQAAAAsAAAAAAAAAMR1vcmFjbGVkYmEeNR1taW1lHjE2HUhQ TUVYVDEeMTcdb3JhY2xlZGJhQGxhenlkYmEuY29tAAAeAAIwAQAAAAkAAABPUEVOTUFJTAAA AAAeAAMwAQAAACgAAABvcmFjbGVkYmEgL21pbWUgKG9yYWNsZWRiYUBsYXp5ZGJhLmNvbSkA AwAVDAEAAAADAP4PBgAAAB4AATABAAAACgAAAG9yYWNsZWRiYQAAAAIBCzABAAAAMQAAAE9Q RU5NQUlMOm9yYWNsZWRiYSAvbWltZSAob3JhY2xlZGJhQGxhenlkYmEuY29tKQAAAAADAAA5 AAAAAAsAQDoBAAAAHgD2XwEAAAAKAAAAb3JhY2xlZGJhAAAAAgH3XwEAAABXAAAAAAAAAI1V TNDsPBHOgf8IAAmxA3oBAAAACwAAAAAAAAAxHW9yYWNsZWRiYR41HW1pbWUeMTYdSFBNRVhU MR4xNx1vcmFjbGVkYmFAbGF6eWRiYS5jb20AAAMA/V8BAAAAAwD/XwAAAAACAfYPAQAAAAQA AAAAAAAEEgAAAAMAADAFAAAACwAPDgAAAAACAf8PAQAAAEcAAAAAAAAAgSsfpL6jEBmdbgDd AQ9UAgAAAQBvcmFjbGUtbEBmYXRjaXR5LmNvbQBTTVRQAG9yYWNsZS1sQGZhdGNpdHkuY29t AAAeAAIwAQAAAAUAAABTTVRQAAAAAB4AAzABAAAAFQAAAG9yYWNsZS1sQGZhdGNpdHkuY29t AAAAAAMAFQwBAAAAAwD+DwYAAAAeAAEwAQAAABcAAAAnb3JhY2xlLWxAZmF0Y2l0eS5jb20n AAACAQswAQAAABoAAABTTVRQOk9SQUNMRS1MQEZBVENJVFkuQ09NAAAAAwAAOQAAAAALAEA6 AAAAAB4A9l8BAAAAFQAAAG9yYWNsZS1sQGZhdGNpdHkuY29tAAAAAAIB918BAAAARwAAAAAA AACBKx+kvqMQGZ1uAN0BD1QCAAABAG9yYWNsZS1sQGZhdGNpdHkuY29tAFNNVFAAb3JhY2xl LWxAZmF0Y2l0eS5jb20AAAMA/V8BAAAAAwD/XwAAAAACAfYPAQAAAAQAAAAAAAAFAgH5DwEA AABHAAAAAAAAAIErH6S+oxAZnW4A3QEPVAIAAAEQb3JhY2xlLWxAZmF0Y2l0eS5jb20AU01U UABvcmFjbGUtbEBmYXRjaXR5LmNvbQAAAwBxOgAAAAAQAAAAAwAAMAYAAAALAA8OAAAAAAIB /w8BAAAAVAAAAAAAAACNVUzQ7DwRzoH/CAAJsQN6AQAAAAsAAAAAAAAAMR1wZWFjb2NkYR41 HW1pbWUeMTYdSFBNRVhUMR4xNx1wZWFjb2NkYUB3d3dpbmMuY29tAB4AAjABAAAACQAAAE9Q RU5NQUlMAAAAAB4AAzABAAAAJQAAAHBlYWNvY2RhIC9taW1lIChwZWFjb2NkYUB3d3dpbmMu Y29tKQAAAAADABUMAgAAAAMA/g8GAAAAHgABMAEAAAAJAAAAcGVhY29jZGEAAAAAAgELMAEA AAAuAAAAT1BFTk1BSUw6cGVhY29jZGEgL21pbWUgKHBlYWNvY2RhQHd3d2luYy5jb20pAAAA AwAAOQAAAAALAEA6AQAAAB4A9l8BAAAACQAAAHBlYWNvY2RhAAAAAAIB918BAAAAVAAAAAAA AACNVUzQ7DwRzoH/CAAJsQN6AQAAAAsAAAAAAAAAMR1wZWFjb2NkYR41HW1pbWUeMTYdSFBN RVhUMR4xNx1wZWFjb2NkYUB3d3dpbmMuY29tAAMA/V8BAAAAAwD/XwAAAAACAfYPAQAAAAQA Received on Fri Jun 02 2000 - 01:43:28 CDT