[ale] Klez revisited

[Kevin Krumwiede]

On Wed, 2002-05-08 at 15:46, Irv Mullins wrote:
> 	
> Does anyone know if it is necessary to actually click 
> on and run the .exe (.bat, .pif) file that comes with 
> the klez virus, in order for it to be installed?
> 
> It begins with a few lines of html, so when using Outlook 
> Depressed with html rendering turned on, as most people
> do, will it be activated when the message is viewed?

>From what I read on Symantec's site, it tries to exploit a bug in

Outlook [ Express ] that will result in it running automatically.

Krum


---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.