Start your own community in Operating Systems.  

Bubbleboy is a worm virus which is spread via an HTML email message and can  be activated simply by opening an infected message or previewing it in the Preview pane of Outlook or Outlook Express. This worm has not yet been reported outside the laboratory(but reportedly will show up in the task list as "FCLSS.EXE" running under Win95/98/NT and is supposed to affect any .exe, .scr, and .ocs files).
 
More Information
 
This particular worm requires the Windows Scripting Host (WSH) and exploits  the scriptlet.typelib security vulnerability that is
documented at:
 
http://www.deja.com/[ST_artlink=www.microsoft.com]/jump/http://www.microsoft.com/security/Bulletins/ms99-032.asp
 
Installing the "scriptlet.typelib/Eyedog" security patch will cause Outlook or Outlook Express to prompt you at Low security that a
script is attempting to use a control that is not marked safe for scripting. At High or Medium security (default for both Outlook and Outlook Express), you are not prompted and the script is not
executed after installing the "scriptlet.typelib/Eyedog" patch.
 
For more information on the behavior and effects of the Bubbleboy worm, see the following sites:
 
http://www.symantec.com/avcenter/venc/data/vbs.bubbleboy.html
 
http://www.deja.com/[ST_artlink=www.datafellows.com]/jump/http://www.datafellows.com/v-descs/bubb-boy.htm
 
http://www.deja.com/[ST_artlink=www.cai.com]/jump/http://www.cai.com/virusinfo/encyclopedia/zoo_v.htm#bubble
 
To protect against related threats that use script in an HTML email message, you can configure Outlook Express or Outlook to use the Restricted sites zone for security and then configure the Restricted sites zone so that Active Scripting is disabled (not the default). This procedure is documented in the following Microsoft Knowledge base articles:
 
How to Disable JScript and VBScript in Outlook Express
http://www.deja.com/[ST_artlink=support.microsoft.com]/jump/http://support.microsoft.com/support/kb/articles/q192/8/46.asp
 
OL2000: Scripts Embedded in HTML Messages Run without Warning
http://www.deja.com/[ST_artlink=support.microsoft.com]/jump/http://support.microsoft.com/support/kb/articles/q215/7/74.asp
--
ah @¿@
-- 
ah @¿@