Whip-lash Kneel before me... for I am Root!
Joined: 20 Nov 2000 Posts: 573
|
Posted: Sat Feb 14, 2004 9:20 pm Post subject: Yahoo Groups emails flagged as {Virus?}, and how to fix it |
|
|
I've noticed a sharp increase in virus notifications for a large number of messages originating from Yahoo Groups. Messages are having {Virus?} tagged in front of the original subject, as well as placing a virus notification message in the body with the original body as an attachment. The virus notification message is usually:
Found dangerous IFrame tag in HTML message
This is not an actual virus, but it is an issue with security and privacy. Yahoo is placing this IFrame tag in their HTML messages to link to doubleclick.net advertisements, which has had a bad history of privacy problems.
I highly recommend disabling HTML messages from Yahoo Groups until they fix this problem. Here's how to do this:
* Go to http://groups.yahoo.com/mygroups/, then go to "Email Preferences".
* For each of the addresses you have in this list (or at least those with Planetfurry), under click "Edit" under the Options column.
* Under Message Format, make sure "Do not convert to HTML" is selected.
* Click "Save Changes".
This next part may be rather tedious, but since Yahoo doesn't have a way to make the change global for all of your group memberships you will have to go into each one individually.
* Open the homepage for each group, and go to "Edit My Membership".
* Under Message Format, make sure "Do not convert to HTML" is selected.
* Click "Save Changes".
Unfortunately, Yahoo is using a HTML code that is a tactic used by spammers, so it is a valid concern and cannot be removed from our scanners. Complaints should be directed to Yahoo's Privacy Feedback Page.
Below is an example of the HTML that is triggering the virus scanner:
Code: | <table><tr><td align=center><font face=arial size=-2>ADVERTISEMENT</font><br>
<IFRAME SRC="http://ad.doubleclick.net/adi/[protected-string].yahoo1/[protected
-string];sz=300x250;code=[protected-string];dcopt=rcl;click=http://rd.yahoo.com
/SIG=[protected-string]" WIDTH=302 HEIGHT=252 MARGINWIDTH=0 MARGINHEIGHT=0
HSPACE=0 VSPACE=0 FRAMEBORDER=0 SCROLLING=no BORDERCOLOR='#000000'>
<SCRIPT language='JavaScript1.1' SRC="http://ad.doubleclick.net/adj/[protected-
string];abr=!ie;sz=300x250;code=[protected-string];dcopt=rcl;click=http://rd.ya
hoo.com/SIG=[protected-string]">
</SCRIPT>
<NOSCRIPT>
<A HREF="http://rd.yahoo.com/SIG=[protected-string]*http://ad.doubleclick.net/j
ump/[protected-string];abr=!ie4;abr=!ie5;sz=300x250;code=[protected-string];dco
pt=rcl;ord=[protected-string]">
<IMG SRC="http://ad.doubleclick.net/ad/[protected-string];abr=!ie4;abr=!ie5;sz=
300x250;code=18634;dcopt=rcl;ord=[protected-string]" BORDER=0 WIDTH=300 HEIGHT=
250 ALT="Click Here">Click Here</A>
</NOSCRIPT>
</IFRAME></td></tr></table> |
|
|