# Computer Virus question **URL:** \ **Category:** Factual Questions\ **Created:** [August 22, 2003, 4:25pm UTC](https://boards.straightdope.com/t/computer-virus-question/196958 "2003-08-22T16:25:33Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Matchka](https://avatars.discourse-cdn.com/v4/letter/m/77aa72/32.png) [@Matchka](https://boards.straightdope.com/u/Matchka)\ **Post date:** [August 22, 2003, 4:25pm UTC](https://boards.straightdope.com/t/computer-virus-question/196958/1 "2003-08-22T16:25:33Z")
I use the internet. I have an older computer (a tad on the slow side) so I don’t download much other than the occasional Windows 98 update. Given this behavior, can I still get a computer virus (from the internet) simply by visiting a site? Or do I have to actually download and/or execute a program? How about e-mail? Can I get infected by just receiving a tainted e-mail? Or do I have to open an attachment.😕 ---
**Author:** ![RealityChuck](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/realitychuck/32/195_2.png) [@RealityChuck](https://boards.straightdope.com/u/RealityChuck)\ **Post date:** [August 22, 2003, 4:45pm UTC](https://boards.straightdope.com/t/computer-virus-question/196958/2 "2003-08-22T16:45:30Z")
There are always exceptions, but generally you don’t get a virus simply by visiting a site. (Nimda, which did try to download it to your computer if you visited an infected site, only infected if you clicked on the warning screen and agreed to install the virus.) You usually have to download/execute a program. Sites can sneak spyware on your computer using ActiveX controls, but viruses aren’t spread this way. E-mail is like always. You need to click on an infected attachment to get infected. Microsoft Outlook and Outlook Express once had a security hole that did allow infected merely by getting the e-mail under certain conditions, but that’s been patched for nearly two years, and no significant viruses took advantage of it. ---
**Author:** ![Number](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/number/32/242_2.png) [@Number](https://boards.straightdope.com/u/Number)\ **Post date:** [August 22, 2003, 4:49pm UTC](https://boards.straightdope.com/t/computer-virus-question/196958/3 "2003-08-22T16:49:06Z")
There are a number of vulnerabilities in unpatched copies of Internet Explorer and Outlook Express which can theoretically be exploited just by viewing a malicious webpage or email, even if you don’t execute anything or open attachments. It is very important to apply all Critical Updates from [Windows Update](http://v4.windowsupdate.microsoft.com/en/) to fix these security holes. A new [cumulative patch](http://www.microsoft.com/downloads/details.aspx?FamilyID=81750da9-bddf-4c93-bf30-5857b4127a88&DisplayLang=en) was released two days ago. OE can be made a lot safer by setting it to open emails in the Restricted sites zone under **Tools|Options|Security**. This is the default setting for OE6, but wasn’t for 5 and earlier. ---
**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\ **Post date:** [August 23, 2003, 3:57am UTC](https://boards.straightdope.com/t/computer-virus-question/196958/4 "2003-08-23T03:57:20Z")
Note that the first response more or less addresses “correct software behavior” while the second addresses “hey, we goofed” typical software behavior. Hence the differences between them. You’re not supposed to get a virus/worm just be looking at a web page or by displaying the subject line of an email, but hey, they goofed. Will continue to goof. Etc. Avoiding the most common Internet software programs _greatly_ reduces the chances of such problems. Basically no non-trivial program will be safe. But if you use programs unlikely to be targetted, that helps. ---
**Author:** ![johncole](https://avatars.discourse-cdn.com/v4/letter/j/5f9b8f/32.png) [@johncole](https://boards.straightdope.com/u/johncole)\ **Post date:** [August 23, 2003, 6:04pm UTC](https://boards.straightdope.com/t/computer-virus-question/196958/5 "2003-08-23T18:04:58Z")
Like **Number** said, _ **but** _ (to add to the general sense of paranoia) > [@](#): > > …from McAfee > > W32/Lovsan.worm.a is a Medium-On-Watch Internet Worm. Also known as “Blaster” or “MSBlaster”, Lovsan has quickly infected computers throughout the Internet. The worm takes advantage of a flaw in Windows NT, 2000 and XP operating systems to drop a malicious program on your computer. > > \*\*Unlike typical computer viruses, which usually arrive as email attachments, Internet worms attack open communication ports on vulnerable systems, often without the operator’s knowledge. By taking advantage of a vulnerability in Windows, \*the worm is able to spread without requiring any action on the part of the user. \*\*\* It makes **Number** ’s comment on updates even more appropriate. As you are using W98, you are safe from this particular nasty.