On the other hand, there is simple way to avoid mail viruses. No one is trying to keep it secret, in fact, many are broadcasting it as they can. Still, mail viruses are spreading. (Even the "unzip encrypted attachment" ones).

If you are curious, that simple way is never execute any email attachment. Note that there are no valid reason to do it, doubly so in work. It consist of two parts: First, mail client must be able to distinguish executable from document. Second is "user must not be stupid" part.

Of course, this don't stop worms which use vulnerability of some specific mail client. There is no principially better solution to them that use applications writen with security in mind and apply security patches. I said principially because there are reserves in how secure is application written and how fast a patch is distributed (and most vendors are triing to improve it).

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/372/32782#32782