Ok, from Panda http://www.pandasoftware.com/virus_info/encyclopedia/overvie w.aspx?idvirus=36556 Brief Description Exploit/iFrame is a vulnerability exploit. It is not categorized as a virus, worm or Trojan. To be more precise, it is code written in the HTML language, which is included in the body of a message in order to exploit a vulnerability in Internet Explorer This vulnerability is exploited by worms like Klez, Nimda, Badtrans, Frethem, etc., in order to run automatically if the Preview pane in Outlook is enabled. I checked my records in my Panda, I got this from the Japanese girl vs Playboy thing that was going on related to this list, I was also infected with Klez, same message. I had sent a message to the group that I didn't receive the virus as an attachment but just as the text in a message, I guess this is how that happened. Also found several links on Google: http://www.google.com/search?q=exploit%2Fiframe&btnG=Google+ Search&hl=en&ie=UTF-8&oe=UTF-8 One that I read, http://www.computing.net/security/wwwboard/forum/2545.html the one person had heard that IE 6 was safe, but wound up reformatting her hard drive, one reply said that it seemed IE 6 was vulnerable. Since this came through OE, I wonder if it's OE 6 that's safe? I have not wanted to update to OE 6 and have OE 5.5. Terry ----- Original Message ----- From: "§Pat§" <rhekay@xxxxxxxxxx> To: <pctechtalk@xxxxxxxxxxxxx> Sent: Wednesday, May 28, 2003 4:46 AM Subject: -=PCTechTalk=- Re: IFRAME UPDATE Ok Terry I didn't get anything other than what I posted... I run IE 6 also. Do you have a link or something I can go read up on this? It would be appreciated. Pat ----- Original Message ----- From: "Terry" <glutathionemiracles@xxxxxxxxxxx> To: <pctechtalk@xxxxxxxxxxxxx> Sent: Wednesday, May 28, 2003 12:53 AM Subject: -=PCTechTalk=- Re: IFRAME UPDATE > I don't know about this, Panda informed me of the Iframe > vulnerability a couple of days ago and supposedly fixed it, > said it had been exploited and I run IE 6. > > ----- Original Message ----- > From: "§Pat§" <rhekay@xxxxxxxxxx> > To: "PCTECHTALK2" <pctechtalk@xxxxxxxxxxxxx> > Sent: Tuesday, May 27, 2003 9:30 PM > Subject: -=PCTechTalk=- IFRAME UPDATE > > > This just came through that list : > Hi Folks, > Questions are still coming in as to how to not get this > Trojan after > cleaning your pc. Here is the info you need. > Once you remove the Trojan from your pc, you must upgrade > with this patch or > you can be reinfected. > This is for IE/OE 5.01 to 5.5. If you have upgraded to IE 6 > it is included > in that upgrade. > To download: > Pick your language on the right side and click Go. > http://www.microsoft.com/windows/ie/downloads/critical/q2901 > 08/default.asp > Now click on your version to download it! When the Save box > comes up, pick > 'run from the site' option and when it's done reboot! After > that you can't > get it again! > > > > > To unsub or change your email settings: > //www.freelists.org/webpage/pctechtalk > > To access our Archives: > http://groups.yahoo.com/group/PCTechTalk/messages/ > //www.freelists.org/archives/pctechtalk/ > > For more info: > //www.freelists.org/cgi-bin/list?list_id=pctechtalk > > > To unsub or change your email settings: > //www.freelists.org/webpage/pctechtalk > > To access our Archives: > http://groups.yahoo.com/group/PCTechTalk/messages/ > //www.freelists.org/archives/pctechtalk/ > > For more info: > //www.freelists.org/cgi-bin/list?list_id=pctechtalk > > To unsub or change your email settings: //www.freelists.org/webpage/pctechtalk To access our Archives: http://groups.yahoo.com/group/PCTechTalk/messages/ //www.freelists.org/archives/pctechtalk/ For more info: //www.freelists.org/cgi-bin/list?list_id=pctechtalk To unsub or change your email settings: //www.freelists.org/webpage/pctechtalk To access our Archives: http://groups.yahoo.com/group/PCTechTalk/messages/ //www.freelists.org/archives/pctechtalk/ For more info: //www.freelists.org/cgi-bin/list?list_id=pctechtalk