[thelist] failure notice (& CF TIP)

[John Handelaar]

> -----Original Message-----
> From: thelist-admin at lists.evolt.org
> [mailto:thelist-admin at lists.evolt.org]On Behalf Of Richard H. Morris
> Sent: 18 September 2001 20:38
> To: TheList
> Subject: Re: [thelist] failure notice (& CF TIP)
> 
> How about:
> 
> i) make sure you have the latest virus identity file;
> ii) run your installed scanner and disinfect your system; and
> iii) make a mental note to:
>     a) never run an executable unless you've first virus checked it;
>     b) make sure you're always bang up to date with your AV software; and
>     c) spend a bit of money on *decent* AV software.

Utterly unhelpful.  Way to go, Richard.

The answer:

1	Look for all instances of README.EXE on your local
	disks and delete them

2	Search the registry for 'macrosoft' and remove the
	keys

3	Uninstall IIS and Windows Scripting Server on your 
	desktop machine

4	Disable 'active scripting' in IE at all 4 security
	settings.  Better still, get Mozilla 0.9.4 instead
	'cos it's (believe it or not) more robust and doesn't
	suffer from the security bug which enables one
	of this worm's 6 or 7 methods of propagation.

------------------------------------------
John Handelaar

T +44 20 7209 4117       M +44 7930 681789
F +44 870 169 7657   E john at userfrenzy.com
------------------------------------------