About the Trojan Horse Warning

[Erika Wolf]

I checked out the Trojan Horse warning with virusbusters at the University
of Michigan's Information and Technology Division. Here is an excerpt from
my query and their response:

>> Hi, I received an email about a Trojan Horse named picture.exe.  There
>> is a story on MSNBC about it, saying that McAffe has updated it's
>> antivirus software to deal with it.  Story at:
>> http://www.msnbc.com/news/229572.asp#BODY

>> Can you let me know if this is real?

   I'm sure if they say it is, they're being honest.  But see below.

>> I checked other sites looking for this and haven't found it
>> anywhere.

   Comments:

   1. Warnings based on filename are just plain stupid.  The bad guys can
      rename the thing to anything they want, and of course there could be
      a perfectly innocent PICTURE.EXE out there.

   2. I advocate NEVER accepting an attachment -- binary or otherwise --
      from someone you don't know.

   3. Moreover, don't accept them from folks you DO know, unless you've
      requested it (or at least you expect it)

   4. Even if you DO expect it, scan it with an antivirus product first
      (U-M users who have DSAV installed will have this happen
      automatically with WinGuard or Virex Control Panel)

   5. And make sure the antivirus product is up-to-date.

   6. Even that isn't a guarantee, but it's a pretty good start.

   Hope that helps.


*****************************************************************
Erika M. Wolf

WORK:                                   HOME:
Department of Art and Art History       2452 Stone Road
Wayne State University                  Ann Arbor, MI 48105
150 Art Building, 450 Reuther Mall
Detroit, MI 48202
Office phone:   313-577-5967            Home phone: 734-763-7078
Office fax:     313-577-3491
*****************************************************************