Is it possible to get a virus without opening attachments?

[nonconformist]

I have been recieving a lotta spam mail recently. One just stated that someone was using the sender (something???@comcast.com) to spam me, and I am worried it might have put a virue etc. on. Is it possible without downloading any attachments?

 

[taper]

It is possible, but I don't know if one has ever been released. A few years ago a speaker came to my campus to take about network security, viruses, and the like. He worked for MacAfee for awhile, and seemed to really know his stuff. He told us that the gov't wanted to find out if it was possible, so they developed a virus that could spread itself without any human help. They did it, and as far as we know there is only one copy of it, locked in a vault somewhere. They also only let a programmer work on one section of code, so no one person knows the entire program.

 

[IglooDame]

I have been recieving a lotta spam mail recently. One just stated that someone was using the sender (something???@comcast.com) to spam me, and I am worried it might have put a virue etc. on. Is it possible without downloading any attachments?

The answer is "sort of" - if you use Outlook, Outlook Express, or some other mail client that will execute HTML/scripting code in the body of the email (or in the preview pane) then yes, you can get a virus without manually downloading something. As I recall there have been several email-borne viruses that spread this way, but I can't think of the name of them offhand - if you really need to know I'll dig them up for you.

 

[nonconformist]

Ok, that's fine, since I don't use Outlook.
Thanks, guys!

 

[IglooDame]

It is possible, but I don't know if one has ever been released. A few years ago a speaker came to my campus to take about network security, viruses, and the like. He worked for MacAfee for awhile, and seemed to really know his stuff. He told us that the gov't wanted to find out if it was possible, so they developed a virus that could spread itself without any human help. They did it, and as far as we know there is only one copy of it, locked in a vault somewhere. They also only let a programmer work on one section of code, so no one person knows the entire program.

There are lots of viruses that spread themselves without human help, they're called "worms". And since worm-type viruses tend to exploit security holes in order to propagate, it is entirely possible that whatever the government had created is now obsolete due to patching of vulnerabilities. In any case, it sounds like the guy was BSing you, to me.

 

[Nixnutz]

IglooDude is right...some of the last variants of MyDoom, Bagle and Netsky were capable of executing when the email was opened.

If your antivirus is up-to-date, you probably don't have to worry about spreading anything.

 

[Thrawn]

And as long as you don't use Outlook or anything like that, you'll be a lot safer too.

 

[Plexus]

Both using an email scanner and using a not Outlook email client can help with not getting virii.

 

[Grisu]

Actually you can get all viruses without opening attachments. those that require you to open an attachment arent really viruses but trojans.

Luckily right now I know of no virus that distributes itself by email, but that can change

As ID said worms spread themselves by using security holes. You could get the sasser worm for example by just being online (with a windows2k or higher system) and not having installed all the security patches.

 

[Nixnutz]

I checked Network Associates for what can infect a computer without any user action. I was somewhat incorrect earlier in the thread. (Also, I tend to lump virus/worm/trojan together using virus as a catchall...the users I deal with at work don't understand the difference anyway.)

There are at least two threats "in the wild" right now...late variants of Bagle being one, Sasser the other.

Oh...and for those of you who think you are free and clear not using Outlook, peruse this site, http://www.us-cert.gov/channels/index.html, and check out the alerts.

 

[IglooDame]

Actually you can get all viruses without opening attachments. those that require you to open an attachment arent really viruses but trojans.

Luckily right now I know of no virus that distributes itself by email, but that can change

As ID said worms spread themselves by using security holes. You could get the sasser worm for example by just being online (with a windows2k or higher system) and not having installed all the security patches.

And that's where software firewalls (ZoneAlarm being my choice) and hardware firewalls like those sold (US$100 or less) by LinkSys, NetGear, or D-Link come in - they should protect you from the worms even if you're not fully patched, and they are helpful against hackers too.

 

[nonconformist]

I goit a bloody trojan this morning, and spent 7 hours getting rid of it!