inbox virus

[humpingdan]

just had a few viruses through this morning - no suprise there! just had a look at the source because it contained a link and im always curious as to how these things are set up to catch people out!

it had a link
sumthing similar to

www.mydomain.com/inbox/user/msg.php?98d98432

but the link points to,

a href=cid:4389743@43098y43

or something like that,

ive never come across the use of "cid" before, could anyone explain it too me?

Thanks

[humpingdan]

well ill answer my own question!

the "cid" used in the link is is used because files cannot be embedded into a outlook email only refrenced from the header where the actual file location and name are stored,

the link was held in an IFRAME so when the email is selected using outlook the preview pane loads its contents, probelm is that the IFRAM src= hold the "cid" which refrences a file in the header this happens to be a virus and an iframe beaving the way it should automatically executes the file, this aptly being named email.txt lets un-suspecting users click the open button and wham bam virus!

[TheDoctor]

Set your email client to read only text. This stops this sort of virus, no problem :-)