I run Internet Explorer 6 and still hit by the worm


I recently have been hit several times with email infected with the worm [email protected]". Fortunately, my virus program stopped it each time. But, I followed Ken's link to Microsoft's fix for this problem, and found that they say that you shouldn't have this problem if you are running IE 6, which I am. There is no download for IE6 that I could find. Do you have any other ideas on how to stop this worm from hitting my system? And, if I download a fix for the worm, will that stop the system from "trying" to open the file so that the virus program has to delete it? Thank you.



This question was answered on December 5, 2001. Much of the information contained herein may have changed since posting.


This memory-resident Internet worm is a variant of WORM_BADTRANS.A It propagates via MAPI32, has a Key Logger component, and arrives with randomly selected double-extension filenames

It does not require the email receiver to open the attachment for it to execute It uses a known vulnerability in Internet Explorer-based email clients (Microsoft Outlook and Microsoft Outlook Express) to automatically execute the file attachment This is also known as Automatic Execution of Embedded MIME (Multipurpose Internet Mail Extentions) type

When you upgraded to IE 6, did you select the Full Install?

According to Microsoft Security Bulletin (MS01-020), this vulnerability to the worm can be eliminated either by installing the patch or upgrading to an unaffected version However, customers who upgrade to IE 6 on Windows 95, 98, 98SE or ME must select either Typical Install (this is the default) or Full Install in order to eliminate the vulnerability

By this, its likely you have not downloaded the Full Version.

As to your second question, with IE 6, you don't need a fix and with the new version it shouldn't launch the attachment automatically when it rendered the e-mail

Thank you for writing and hope this has been helpful!

Need Help with this Issue?

We help people with technology! It's what we do.
Schedule an Appointment with a location for help!


Posted by Phoenixaz of Chandler-Gilbert Community College on December 5, 2001