Another day, another virus

Daily Newsletters

Sign up to ZDNet UK's daily newsletter.

NEWS
While not even in the same league as Melissa when it comes to potential damage, it does share some similarities with the far more annoying Melissa. Like Melissa, boa is spread by e-mail. In the example that came to us, it was an attachment from someone calling himself CASSA with a poorly written message asking the user to look at the attached beta program. The letter promised that the attachment was a "'FTP,Http.Anti-virus,Proxy Files all in one" program. Between the language, and the fact that it seemed pretty unlikely that it could all fit in a 12K executable, resellers are advised to decline this mail bomb. Mikko Hypponen, Data Fellows' manager of anti-virus research, who also got this obnoxious package, popped it open and found a long, inane message that ended with: "you should becareful what you get from an email." While this little bit of computer dirt was clearly corrupt from the moment it enters mailboxes, other viruses--Melissa leading the way--are much nastier and harder to see coming. The only solution is to keep one's anti-virus guard up. Melissa may have been rendered toothless, but her children live on. Ping and Papa B are the latest Melissa like worms to appear, affecting Word 97 documents and Excel 97 spreadsheets respectively. Ping, unlike Melissa doesn't go after Outlook to reproduce. Instead it makes denial of service attacks on your network and Internet sites by constantly generating ping requests to four different net sites. Papa B, combines a similar denial of service attack with the getting to be all too familiar Melissa trick of using Office 97's insecurity to spread itself across the net while stalling out mail servers along the way. What can you do about it specifically? Besides making sure your customers are safe behind constantly updated anti-viral programs, such as Data Fellows' F-Secure and Symantec's Norton Anti-Virus, it's time to consider adding protection at the mail transfer agent (MTA) level. Some mail servers like Sendmail Inc's Sendmail Pro have included some anti-viral protection by using their built-in, anti-spam shields to knock out Melissa messages on their way in. Another approach is to use anti-viral programs that work with a user's given MTA. These include Symantec's Norton AntiVirus for Internet Email Gateways and Norton AntiVirus for Lotus Notes and Dr Solomon's Anti-Virus for Microsoft Exchange. Last, but far from least, it may be time to discourage users from using MS Office 97 attachments at all. With the ease of constructing Office 97 macros that use the Melissa trick of making messages appear to be from trusted friends and co-workers, it may be time to encourage a policy of only using Office 97 attachments when both parties are expecting to exchange documents. We can no longer count on viruses being as obvious as today's blast-from-the-past boa virus. Viruses' bag of tricks have become far subtler, so resellers need to use all the tools available to protect themselves and their customers. Take me to the Melissa Virus special.

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

BrownieBoy

> I'm told it's somewhat annoying when people have their Macs stolen > and Apple stores treat the thief as the owner, but there you go. Ouch,...

1 hour ago by BrownieBoy on AMD Ultrathins to challenge Intel Ultrabooks
Moley

@kevinmchapman. OK, I acknowledge that 'most' was a gratuitous throwaway comment as an afterthought and too presumptuous. As to proof, as you...

6 hours ago by Moley on A tale of two distros: Ubuntu and Linux Mint
Jack Schofield

@BrownieBoy > Works really well for thieves.... >> Nice attempt to deflect the argument by tossing in a point that's totally >> irrelevant, even...

7 hours ago by Jack Schofield on AMD Ultrathins to challenge Intel Ultrabooks
raskolnikof

fantastic that the so called piracy bills have been withdrawn. however, these anti-democracy supporters are still in the shadows so lets be alert...

8 hours ago by raskolnikof on SOPA, Protect IP support wavers in face of online protest
Tony Douglas

Please God no; teach them anything you like - thinking rationally, the uses and misuses of data, what data is and what it's not - but leave the...

10 hours ago by Tony Douglas via Facebook on Kids are the future. Teach ’em to code.
BrownieBoy

@Jack, > Works really well for thieves.... Nice attempt to deflect the argument by tossing in a point that's totally irrelevant, even it were...

1 day ago by BrownieBoy on AMD Ultrathins to challenge Intel Ultrabooks
bootlegger

Make that 13 people now - I got refused today at Manchester airport. I thought I was up to date on this legislation - I knew of the EU ruling from...

1 day ago by bootlegger on UK airport body scans will not be opt out
tinycg

Don't forget to check out apps like GoodReader or SlideShark either, they're indispensible for people on the go in presentation situations. Best...

1 day ago by tinycg on Four top iPad apps for people on the move
TerryRK

Well it seems there is something a number of us agree on. Why is the Ubuntu Unity launcher so ugly? I thought perhaps it was something to do with...

1 day ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint
Freebies202

Duplicate comments are not made intentionally. Its very good to know that now you are keeping check on this problem because sometimes a commenter...

2 days ago by Freebies202 on Microsoft fixes blog comments, speeds up blogs with open source
kevinmchapman

"the very significant number of users" and "many (most) of us" - you have no evidence for these statements. It is a fact that most users are saying...

2 days ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint

Another grammar faux pas is the improper use of "you". When sitting down down in a restaurant, for example, I get cringe when the waitress...

2 days ago by via Facebook on 10 flagrant grammar mistakes that make you look stupid
zdnetukuser

And NOW, folks, for Canonical's next trick... Kubuntu is late. Here's a pencil. Draw your own conclusions. cf.:...

2 days ago by zdnetukuser on Linux Minterface
Moley

@kevinmchapman. The discussion here reflects the very significant number of users who really do like the traditional menu system and who wish to...

2 days ago by Moley on A tale of two distros: Ubuntu and Linux Mint
kevinmchapman

Er, no... It is an efficient means of finding the application/file/setting you need in one place. The icons are a simply a fallback for when you...

2 days ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint
TerryRK

Isn't the provision of a text based search an admission by the developers that the mass of icons approach does not work? I don't need to use a...

2 days ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint
kevinmchapman

"Unity and GNOME 3 both abandon the old text-based cascading menus in favour of a graphical icon-driven system." Point truly missed. Both use a...

2 days ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint
TerryRK

whs001 - Thank you, I'm glad you liked the article. I absolutely agree with you on your first point. I should perhaps have made it clearer that...

2 days ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint
Dennis Nilsson

If we allow corporate interest to dictate the way our government circumvents due process against foreign entities then we should accept the same...

3 days ago by Dennis Nilsson via Facebook on ACTA stumbles in Germany
GHar123

I totally dislike pirating of works, I fear that artists will be deterred from creating works if they think that they are going to get ripped off....

3 days ago by GHar123 on ACTA stumbles in Germany