Code Red Computer Worm
Here are links to further
information about the "Code Red" computer worm :
Code Red Technical
Information
Microsoft
Code Red Security Patch
Technical Discussion of Code Red
worm and Code Red II
Naked Wife - New PC Virus
DO NOT OPEN UP ANY EMAILS WITH THE WORDS "NAKED WIFE".
THIS IS A VERY DESTRUCTIVE VIRUS.
A new virus was detected
on March 6, 2001. The virus is called "Naked Wife". This virus is
extremely destructive. The virus is a mass mailing worm that disguises
itself as a flash movie. The attachment is named "NakedWife.exe". This
worm, after it has attempted to email everyone in the Microsoft Outlook
address book, will attempt to delete several system files. This will leave
the system unusable and will require a reimage of your PC.This virus is
currently under investigation.
Here are a couple Symantec sites about
it:
Symantec
security Response
Melissa Virus
Information about the Melissa is
available from the DataFellows site's Melissa
Virus information page.
"The virus activates if it is executed when
the minutes of the hour match the day of the month - for example 18:27 on
the 27th day of a month. At this time the virus will insert the following
phrase into the current document which the user has open in Word:
'Twenty-two points, plus triple-word-score, plus fifty points for using
all my letters. Game's over. I'm outta here'".
Email Wire Tap Possible in Outlook or Netscape
The
Privacy Foundation
announced that there is a deficiency in the design of the Javascript
language that is used in Microsoft's Outlook, Outlook Express and
Netscape's recent web browser that permits code to be embedded within an
email message that returns a copy of all correspondence it encounters,
including forwards, back to the sender (or to anybody anywhere on the
Internet for that matter).
A simple corrective action you can do is to
disable Javascript translation in your browsers, but this has the side
effects of disabling the display of a lot received page content; it also
inhibits using some kinds of email attachments, plus it does not protect
the recipients of any forwarded email from their email being tapped.
Netscape has
announced it will have corrective code available soon.
An extensive discussion of the problem, including a detailed
legal opinin, and programming details is at the Privacy Foundation
Select the "Internet Wiretap Requests on the Rise"
link.
Email Vulnerability in Outlook or Outlook
Express
A recently reported problem in Outlook or Outlook Express
has the potential to allow some future virus (probably won't take long) to
take over your machine JUST BECAUSE YOU DOWNLOAD YOUR EMAIL.
News
story
Upgrade
A component shared by Outlook and Outlook Express,
Inetcomm.dll, contains an unchecked buffer in the functionality that
parses e-mail headers when downloading mail via either POP3 or IMAP4. By
sending an e-mail that overruns the buffer, a malicious user could cause
either of two effects to occur when the mail was downloaded from the
server by an affected e-mail client. If the affected field were filled
with random data, the e-mail could be made to crash. If the affected field
were filled with carefully-crafted data, the e-mail client could be made
to run code of the malicious user's choice.
Resources for Handling Internet Viruses :
Free Full-fledged Antivirus Software
InoculateIt Personal
Edition , from Computer Associates, is billed as a full capability
package that prevents viruses, Trojan Horses, worms, and macro
viruses.:
StockHelp Database
Another site that purports to
keep a database of all known viruses is the StockHelp website.
If
your "new virus" is not listed there, then post a message about it to the
Virus Hoax Busters Mailing
List and ask to have it researched. But be warned that this site
carries the using of cookies for advertising to an extreme.
Virus Encyclopedia
A full Virus Encyclopedia
that claims to list all known viruses.
Virus Warning Centers
The following sites attempt
to keep track of the latest virus situation :
AVP Virus Encyclopedia
F-Secure Virus Info
Center
Network
Associates Virus Library
Symantec Anti-virus research
Center
Virus Hoax Centers
The following sites attempt to
keep track of the latest virus hoaxes
CIAC Internet Hoaxes
Computer Virus Myths
F-Secure Hoax Warnings
Symantec Research
Center
Urban Legends Centers
The following sites attempt
to keep track of the latest urban legends:
AFU & Urban Legends Archive
CIAC Internet Chain
Letters
Urban legends Reference
Pages
Proposed Cybercrime Treaty
A proposed Cybercrime
Treaty is being discussed in Europe.
Firewall
Another option for virus protection is
called "firewall". Here are some firewall options:
A set and forget
firewall is available from Internet
Security systems
Another personal firewall is eSage
A free firewall is Zone Alarm
from ZoneLabs
A tailorable
firewall is Synbergen Desktop available from Sybergen
Further links which were developed for the Y2K situation, but may
still have useful information about this general area
Anthony Parkins chain
letter
More
Urban Legends
Secure
Internet Programming, Spoofing
Skeptics Society on E-scams
Urban Legends