Worm propagation

Discussion in 'Computer Support' started by Iona Bond, May 22, 2005.

  1. Iona Bond

    Iona Bond Guest

    Does an internet worm such as the current Sober.w find addresses in
    the address books of all email programs, or are some, such as
    Outlook express, more prone to infection? Wondering if having a less
    popular email client such as The Bat, etc would be a better bet.
    Not meaning to demean The Bat :)
     
    Iona Bond, May 22, 2005
    #1
    1. Advertisements

  2. Iona Bond

    Gordon Guest

    Most worms attack the OE/Outlook address books only. Most other GOOD email
    apps are invulnerable AFAIK.....
     
    Gordon, May 22, 2005
    #2
    1. Advertisements

  3. Iona Bond

    Iona Bond Guest

    Thanks, Gordon. I feel better now. :)
     
    Iona Bond, May 22, 2005
    #3
  4. Iona Bond

    Toolman Tim Guest

    Don't. The most recent variant also looks through a lot of other file types
    on a person's PC to find email addresses to propagate itself. From Trend
    Micro's website:

    Worm_Sober.U
    (Related to: Worm_Sober.S)

    This worm uses its own SMTP (Simple Mail Transfer Protocol) engine to send
    messages to all email addresses it obtains from files with the following
    extensions:
    ABC
    ABD
    ABX
    ADB
    ADE
    ADP
    ADR
    ASP
    BAK
    BAS
    CFG
    CGI
    CLS
    CMS
    CSV
    CTL
    DBX
    DHTM
    DOC
    DSP
    DSW
    EML
    FDB
    FRM
    HLP
    IMB
    IMH
    IMH
    IMM
    INBOX
    INI
    JSP
    LDB
    LDIF
    LOG
    MBX
    MDA
    MDB
    MDE
    MDW
    MDX
    MHT
    MMF
    MSG
    NAB
    NCH
    NFO
    NSF
    NWS
    ODS
    OFT
    PHP
    PHTM
    PL
    PMR
    PP
    PPT
    PST
    RTF
    SHTML
    SLK
    SLN
    STM
    TBB
    TXT
    UIN
    VAP
    VBS
    VCF
    WAB
    WSH
    XHTML
    XLS
    XML
     
    Toolman Tim, May 22, 2005
    #4
  5. Well, no. Most other email applications outside of Outlook and OE are just
    so relatively rare that they are not usually targeted. Invulnerable means
    "immune" or "impregnable" and that is not an accurate description at all.
    The day that another program becomes the dominant email client (or even
    receives a major share of the installed user base) is the day that it
    becomes a target worth attacking.

    As far as "good", that's a bunch of hokum too. Outlook (though bloated) and
    Outlook Express are perfectly fine email clients that work just dandy for
    millions upon millions of users. It's fashionable to bash them as someone
    "not good" but that doesn't mean that what's fashionable is what's right.
    People that follow the security settings advised by MS and who keep a good
    antivirus program up to date can use these programs with no worried. I've
    been using OE and Outlook since the mid 1990's for email and for Usenet and
    have yet to have a single virus infection of any kind.
     
    Oxford Systems, May 22, 2005
    #5
  6. If that were the case, you'd have reason to. But it's not. It used to
    be true, but some malware now looks all over your drive and picks up
    address that aren't in your address book. These aren't dependent at
    all on address-book addresses only; they're looking in lots of other
    file types.
     
    Blinky the Shark, May 22, 2005
    #6
  7. Iona Bond

    pcbutts1 Guest

    Just get a good antivirus program.
     
    pcbutts1, May 22, 2005
    #7
  8. Iona Bond

    Iona Bond Guest


    Thank you all for your thoughts and suggestions. And to Tim - sory
    ifyou got writers cramp for all the extensions
     
    Iona Bond, May 23, 2005
    #8
  9. Iona Bond

    WormWood Guest

    Yeah, can't ya feel his paiste? Err Pain.... :))
     
    WormWood, May 23, 2005
    #9
  10. Iona Bond

    Plato Guest

    MS apps are the most targeted.
     
    Plato, May 23, 2005
    #10
  11. Iona Bond

    Gordon Guest

    Like Fedora core 3.
     
    Gordon, May 23, 2005
    #11
  12. Iona Bond

    Toolman Tim Guest

    <grin> that's EXACTLY right <grin>! After all, computers *are* supposed to
    make life easier, aren't they?
     
    Toolman Tim, May 24, 2005
    #12
  13. Iona Bond

    Toolman Tim Guest

    That particular worm doesn't care what email client is used - there were no
    exploits, no scripts, no embedded malware, etc. It used links to web sites
    that spread their infection - the kind of thing only really, really, dumb
    people can get infected by <g>
     
    Toolman Tim, May 24, 2005
    #13
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.