The Next Generation of worms will exploit the scripting services on Windows clients. They will use either JavaScript, VBScript, or Java applets. We have already seen the beginning of the cycle. Melissa was a VBScript embedded in a Microsoft Word Macro. BubbleBoy is a VBScript embedded in an HTML email.
Bubble boy uses the services called scriptlet.typelib and eyedog.
The LoveBug uses a VBScript email attachment that exploits the Windows Scripting Host in Windows 98 and Windows2000. Yahoo are in a different class. We must develop collective response mechanisms at the router level. We should not be discouraged. It will improve as the community focuses more on security and less on convenience.