Microskrot-fix (Var: Outlook Express og sårbarhet)

From: Bjarne Naerum (bjarne@bo.online.no)
Date: Sat May 06 2000 - 12:41:06 MET DST


Litt konstruktiv problemløsning:

Jeg skrev:
-------------------------
chj skriver:
>Trond Andresen wrote:
>>
>> "Ilove you" viruset spredte seg katastrofalt raskt fordi det videresendte
>> seg via epost-meldinger basert på adresselista i Microsoft Outlook Express
>> -- mens andre epost-prgrammer, f.eks. Eudora, bragte ikke smitten videre
>> (men PCen fikk "bare" ødelagt sine bilde- og mp3-filer.)
>
>i og med at msoe også har egenskapen at alle e-postadresser man sender
>til havner i adresseboken, så blir det på kort tid en veldig stor
>adressebok

M$ Outlook Express (msoe) gir muligheter for å "skru av" både denne
egenskapen og den som gjør at vedlegg åpnes AUTOMATISK. Det er
nå "bevist" at disse mulighetene burde vært av ved levering...
-------------

Hvordan gjøre dette?
1) For at ikke alle e-postadresser man sender til skal havne i adresseboken:
Gå inn på menyvalg 'verktøy' fra hovedvinduet, velg her 'Alternativer' og sørg
så for at denne egenskapen IKKE er valgt/krysset av.

2) For at vedlegg ikke skal kunne åpnes AUTOMATISK:
Følg de gode instruksjoner og oppfordringer i meldingen under, sendt via
en annen e-liste. Merk: I norsk versjon er 'Vis' og 'oppsett' litt ulikt plassert,
men i samme meny osv. Det gjelder altså å slå av 'Forhåndsvisningsruta",
på US engelsk 'Preview Pane'.

Mvh. Bjarne Nærum

>-----------------
>From: "William Dwyer" <wdwyer@california.net>
>To: <atlantis@wetheliving.com>
>Subject: ATL: Virus precautions for novices like me
>Date: Fri, 5 May 2000 14:37:19 -0700
>
>The following note was sent to me. It hope it is helpful.
>
>Friends,
>
> I received one of the infected "I LOVE YOU" emails early this morning
>and quickly deleted it.
>
> If you or people you know are using Microsoft, the important thing is to
>reset the Outlook Express controls so that the "Preview Pane" is not used at
>all. This is vital because, with the Preview Pane activated, an email will
>open in the pane whenever the cursor is placed over it (one need not click
>at all), and this is sufficient to infect your system.
>
> Plus, when the Preview Pane is activated, there is no way to delete an
>email without opening it at the same time, which would be disastrous in this
>case.
>
> I have found that many people (myself included, until recently) don't
>bother to learn how to perform even simple operations to reconfigure their
>default settings, so I am including the following instructions that I hope
>you will pass on to other novices like me who use Outlook Express.
>
> (1)While in the Outlook Express Inbox Window, click "View" on the
>toolbar at the top of your screen.
>
> 2. When the View menu drops down, click the "Layout" folder (which is
>fourth on the list).
>
> 3. The Layout folder is divided into two sections: the upper half says
>"Basic" and the lower half says "Preview Pane."
>
> 4. In the latter (the bottom half) there is a small checkbox that says
>"Show Preview Pane." YOU MUST BE CERTAIN THAT THIS BOX IS NOT CHECKED. A
>check appears as part of the default setting, so, if it is still there,
>click on the box to remove it. Again, the "Show Preview Pane" box must be
>BLANK. Then click OK to return to your Inbox.
>
> 5. After removing the check, you will see that the Outlook Express
>window no longer displays the content of emails at the bottom of your
>screen. All that will appear is a list of headings that indicate who an
>email is from, the subject, etc.
>
> 6. To open a letter in this setting, you must double-left click the
>desired item.
>
> 7. This means that you can now delete an email without opening it.
>Simply place the cursor over the item you wish to delete, then RIGHT click
>on it.
>
> 8. When the menu drops down, left click on the "Delete" option to
>transfer the infected email to your "Deleted Items" bin. (To be on the safe
>side, I would then empty the Deleted Items bin of all contents.)
>
> 9. Please note that an infected email will probably be from someone you
>know and trust, so don't judge an email by its "Sender." (The worm I
>received was "from" someone I receive emails from quite often. )You must
>therefore pay close attention to the "Subject" line. From what I have heard
>so far, you should look for anything that has a reference to "Love" or
>"Jokes." If something like that shows up in your Inbox, delete it
>immediately. Do not open it (by a double left click) if you have any doubts
>at all. If you think it may be an authentic email, I would suggest that you
>contact the Sender (via your address book, of course, not by hitting
>"Reply") and find out for sure.
>
>
> I apologize to those who may find these instructions absurdly simple,
>but I would rather have my friends be safe than sorry.
>
>Best,
>
>George H. Smith
>



This archive was generated by hypermail 2b29 : Thu Aug 03 2000 - 10:25:38 MET DST