 |
 |
At 11:26 AM 12/17/2001 -0500, you wrote: >Its really sick and twisted actually. We just took four of our client >machines offline wile we clean them because of a new magistrate variant. We >use Eudora here as well. When a user opens the viral code it looks for >outlook express to spread and checks outlook address books, Eudora address >books as well as temporary internet files for anything *@*.* and send to >them too. I've read up on Magistr and have never come across a variant that in any way uses the OE executable to spread itself. It does, of course, use the OE address book to get addresses, but a Eudora user will not have any entries in the OE address book. Thus, a Eudora user who merely has an unused copy of OE installed is in no more danger from Magistr than a Eudora user whose computer has been wiped clean of OE. --Chris ============================================== Chris Wolf Computer Service Manager Agricultural Economics [log in to unmask] Michigan State University 517 353-5017