Mark
Tue Nov 16 14:43:08 CST 2004
On Tue, 16 Nov 2004 11:38:03 -0800, "JAD" <Kapasitor@coldmail.com>
wrote:
>Note that at least one person I know thought you could turn HTML off
>by changing the "send messages" setting. That has NO effect on
>incoming messaes.
>
>
>set 'read' to plain text only,,,, very simple
>
And off by default, so the lazy and unknowing majority won't be using
this.
I'd be more likely to know that if I'd used OE regularly during the
last 4 years or so.
>
>"Mark Lloyd" <mlloyd@roachmail.comant> wrote in message
>news:rpgkp0p5lc4bo1fvpjs9kedmb5acbm47qo@4ax.com...
>> On 15 Nov 2004 18:56:52 -0800, execve@mail.ru (Tom Kazanski) wrote:
>>
>> >Hello all,
>> >
>> >Yesterday I'd visited an old friend. He's running Win Me, with no
>> >AV/IDS/FW. His sister was checking her hotmail a/c and downloaded &
>> >opened 2 attachments... Double extension .txt........scr type.
>Ahem.
>> >
>>
>> A file like "story.txt.scr" does not have a double extension. The
>> extension is .SCR (the text after the RIGHTMOST dot). However, it
>does
>> look like .TXT when Winsdows is lying to you about what's there
>("hide
>> common file extensions", a very bad decision for MS to nmake this
>the
>> default).
>>
>> >I'd only rocked up after the fact. Given that laptop is not mine,
>not
>> >a whole lot i can do (brute format + OS upgrade was not an option),
>> >however, took the following steps:
>> >
>> >Wiped all unsolicited e-mail, all downloaded attachments, and all
>> >files created on disk within last 24 hours. (Suspiciously many EXE
>&
>> >DLLs in that lot, all same size at that)
>>
>> This is a good reason for avoiding Outlook Express. It shows
>messages
>> in HTML, which allows malicious code to be run automatically (you
>> don't even have to open an attachment). It seems to be less
>important,
>> but it still helps to avoid Internet Explorer when possible. Try
>> Firefox (
http://www.mozilla.org/products/firefox/).
>>
>> Note that at least one person I know thought you could turn HTML off
>> by changing the "send messages" setting. That has NO effect on
>> incoming messaes.
>>
>> >(web)Port scanned the machine - even though no firewall is present,
>no
>> >services are listening on common high numbered ports.
>> >
>>
>> That would be common LOW numbered ports (0-1055). Also, this does
>not
>> protect you from spyware (the XP firewall won't either).
>>
>> There's another good port scanning service at
>> https://www.grc.com/x/ne.dll?bh0bkyd2 .However, none of these will
>> show vulnerability to OUTGOING connections (such as from spyware,
>> Windows itself is a big offender here too).
>>
>> >Seems to be working ok - anything else that could be done (other
>than
>> >convincing people to not trust odd attachments and have latest AV
>> >etc..., and upgrade to a later OS)
>> >
>>
>> I listed a few others.
>>
>> Notice that the XP firewall is incoming-only, and provides much less
>> protection than a good firewall.
>>
>> >Interestingly, the hotmail AV scanner did not detect anything in
>those
>> >e-mails.
>> >
>>
>> AV scanners often don't detect spyware (although it's still a good
>> idea to use one). A firewall is still important.
>>
>> >Next step (today) will be to re-check any new file creations and
>clean
>> >the registry. (Easy part) And try to convince my non-paranoid
>friends
>> >to use later OS,AV+etc... :)
>> >
>>
>> And turn off the stupid "hide file extensions" setting (it's in
>> "folder options").
>>
>> >P.S. Sometimes malice can't happen without a little bit of
>stupidity
>> >from people who are normally intelligent. Then again, sometimes we
>see
>> >stupidity in manifestations of trust.
>>
>> Both true. And in many cases the stupidity seems to be voluntary.
>>
>> --
>> 39 days until the winter solstice celebration
>>
>> Mark Lloyd
>>
http://notstupid.laughingsquid.com
>
--
39 days until the winter solstice celebration
Mark Lloyd
http://notstupid.laughingsquid.com