> Ouch ... Aaron. You think the Love Bug was browser-based
> script? It was vba file attachment. Yeap ... an executable.
Well, not exactly. The Love Bug virus is a WSH virus - it uses Windows
Script Host to execute. It contains VBScript, and is typically sent as an
attachment. Nonetheless, you can embed WSH commands within HTML-formatted
email, and Outlook will then execute those commands when the message is
read.
The "fix", according to Microsoft, was to disable or remove WSH - which
would turn off the ability for IE to run VBScript and JavaScript. Since
then, Microsoft has released an Outlook patch which disables the use of WSH
from Outlook, but this patch has its own problems. It is possible to
configure Outlook so that it doesn't execute WSH commands, while allowing IE
to execute those commands, but many system administrators find it easier to
simply remove WSH.
Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
