The Outlook
Security Patch
Microsoft has introduced
an Outlook security patch
C
omputer viruses are nothing new the first PC virus was written more than
15 years ago. But whereas older viruses spread via executable files on
floppy disks, modern ones spread via document files and Internet email.
The enormous growth in use of the Internet has meant that new viruses such as
in response to the
the Love Bug, or ILOVEYOU, managed to hit literally millions of PCs in the initial
high profile virus
wave before the virus scanner vendors managed to update their databases of
known virus signatures.
outbreaks earlier this
ILOVEYOU, and Melissa before it, used Microsoft Outlook to spread. Melissa
year which used email to
automatically looked up the first 50 names in the victim's Outlook address book
and mailed a copy of itself to those people. The Love Bug mailed itself to every
spread. We take a look at
single person in the book. Because the resulting messages appeared to originate
what it does and what its
from a friend or colleague of the recipient, many recipients opened the message.
After all, if a friend or colleague sent you a message with a header that possibly
drawbacks are.
proclaimed their love for you, would you think for even a moment that simply
clicking on the message to open it would start a virus running on your PC?
By PCNA Staff
Needless to say, Microsoft came in for much criticism in the wake of virus outbreaks
such as ILOVEYOU because of the ease with which the viruses could spread via
Outlook. Clearly something had to be done. And so, at the end of June, Microsoft
launched the Outlook Security Update. You'll find it on the Web at
www.officeup
date.com
, and it was also on last month's PCNA CD ROM. The update is available
for Outlook 98 and Outlook 2000, but not for Outlook Express. And the new Outlook
Express 5.5, included with the Windows 2000 Service Pack 1 that you can order on
CD from Microsoft, does not include the security update either.
The security update provides protection from most viruses that spread them
selves through email, or worm viruses that can replicate through Outlook. The
update works by limiting or removing certain functionality in Outlook. Thus,
although it will stop many types of virus from spreading, it may also affect the
legitimate function of other programs and also severely limit the facilities that
users may be accustomed to using.
The Outlook 2000 patch requires that you first install Office 2000 Service Release
1a (not plain SR1). This can be found at
www.officeupdate.com
or, if you
subscribe to our sister magazine PC Support Advisor, you'll find it on the
CD ROM. Be aware that the SR1a patch will require access to the original Office
2000 CD ROM, or a copy of it on a server, so ensure that you have it handy.
Functionality
The Outlook update adds three new levels of security:
.EXE
.COM
Email Attachments
.BAS
Email attachment security permanently prevents users from accessing several file
.VBS
types when received as attachments. Affected file types include executables, batch
.JS
files, and other file types that contain executable code often used by virus writers.
.ISN
.LNK
Object Model Guard
.PIF
Object Model Guard prompts users with a dialog box when an external program
attempts to access their Outlook address book or send email on their behalf, which
Figure 1 Level 1 security files.
is how viruses such as ILOVEYOU spread.
Issue 123:October 2000
PC Network Advisor
File: P1835.1
page 7
Problem Solving:Internet
www.itp journals.com
Next page >
New! The best sites for quality inkjet printer cartridges and the best sites for cheap inkjet cartridges