At 11:26 AM 12/17/2001 -0500, you wrote:
>Its really sick and twisted actually. We just took four of our client
>machines offline wile we clean them because of a new magistrate variant. We
>use Eudora here as well. When a user opens the viral code it looks for
>outlook express to spread and checks outlook address books, Eudora address
>books as well as temporary internet files for anything *@*.* and send to
>them too.
I've read up on Magistr and have never come across a variant that in any
way uses the OE executable to spread itself. It does, of course, use the
OE address book to get addresses, but a Eudora user will not have any
entries in the OE address book. Thus, a Eudora user who merely has an
unused copy of OE installed is in no more danger from Magistr than a Eudora
user whose computer has been wiped clean of OE.
--Chris
==============================================
Chris Wolf Computer Service Manager
Agricultural Economics [log in to unmask]
Michigan State University 517 353-5017
|
