Virus alert

[alyse]

If anyone uses yahoo mail, you will want to know about this.

Basically, there is a javascript virus that exploits a weakness in Yahoo mail's interface to mail itself to everyone in the user's yahoo address book, which is why so many mailing lists today have received messages titled 'New Graphic Site'.

That's the virus. Thankfully, most of the yahoogroups I'm on are set up not to permit attachments, but be careful. Not all mailing lists are alike in that.

The update for Norton Antivirus isn't actually available for users with Norton Antivirus versions earlier than 2006 until the next update, due on Wednesday 14th, although if you're lucky enough to own a copy of a Norton programme that can update daily (Antivirus and Internet Security 2006), you can get an updated virus protection file today.

So, be careful and don't open mail that has that subject line, particularly if you use yahoo mail.

The above link provides more information.

Comments

[cetpar.livejournal.com]

Thanks for the heads up. I'm on some yahoo groups and did get an email today. Luckily, I didn't open it because I didn't care about a "new graphics site", but now I know to be careful. (not that I would open an attachment that I wasn't expecting.)

[alyse]

Well, there's no attachment as far as I can tell. It's javascript, so I suspect it's embedded in the html. Luckily, however, if you choose not to allow 'attachments' on any yahoo mailing list that you run, I'm pretty sure it strips out things like javascript as well.

[cetpar.livejournal.com]

Well, there's no attachment as far as I can tell.

Yeah, I missed that the first time, but when I re-read your link and figured that out after I replied. Sorry.

I have my Outlook set to not run any active content in email messages, and I don't think the preview pane on the the newest Outlook does either; but I got paranoid anyway and ran my virus checker. No virus, thank goodness. I wonder if that worm can be adapted to use any email program, not just Yahoo? That would suck.

[fairestcat]

Lovely...

I actually got that email twice today from the con.txt email list

If I'm reading that link right though it's only a problem if you use yahoomail?

Still very obnoxious though

[alyse]

That's the way I'm reading it, but whether you can still be infected by the worm but that it just can't replicate itself unless you have yahoomail I'm not quite sure.

I think better safe than sorry and I know I'll be running a virus check tomorrow when the new definitions download. It's set up to run once a week anyway but again, better safe than sorry :)