August 2001Trojan.JS.Offensive is a Trojan horse-type email virus that comes in the form of an .html file, and can also be set up as a web page on the Internet. It inserts harmful code in the Windows registry of a PC that becomes infected.
If your computer becomes infected with this virus, most options in the Start menu have the icon for a text file; no icons are visible on the Windows desktop; you cannot start any programs; you cannot shut down Windows, and you see a message that it cannot be shut down due to security settings; none of the symptoms are changed if you start in Safe Mode.
Two variants of this Trojan have been detected. These variants differ only in the way they are activated: The first variant displays one button that contains the text "Start" and it is activated when you click the button, and the second variant does not display a button, and it will be activated as soon as you open the .html file enclosure.
If you use an email program that displays .html enclosures, you should set it so that it does not automatically load .html-type email messages. In Outlook Express, go to View > Layout and uncheck the "Show preview pane" option; then, never double-click on emails from unknown parties. If you use another email program on a PC, check with the documentation for that program.
If you use mail.valley.net you should delete emails from unknown parties without clicking on them (just move them to the trash). If an email with this infection opens in your web browser (even in mail.valley.net) it will infect your machine.
For more information about this virus, visit http://www.symantec.com/avcenter/venc/data/trojan.js.offensive.html
BlitzMail is not affected by this virus. As always, we advise our customers to install a good anti-virus program, and to keep it up to date.

ValleyNet

58 North Main Street, PO Box 486, White River Junction, VT 05001 Voice 802 359-4162  |  Fax 802 359-4164