Sweet-Haven

Security Central


This information is presented as a service from Sweet-Haven to help advance the security posture of computer users. As the recent virus/worm incidents revealed, significant damage and costs can be caused by not taking security seriously. A proactive policy is the only way to ensure that your data and programs are safe.

Timely news flashes and updates will be presented here as available.

Virus Resources
 
ILOVEYOU *How to Recover from the ILOVEYOU email worm
ScriptLet Patch * 10 May 2000
Email viruses are now spreading WITHOUT THE USER OPENING ANY ATTACHMENT.

Personal computers running Internet Explorer (IE) version 5.0 and/or Microsoft Office 2000 are vulnerable to virus attacks using most email systems, even if the email recipient opens no attachments. You don't even have to use IE; just have it installed with the default security settings. If you have not closed the hole, you can receive viruses (and spread them) by viewing or previewing malicious email without opening any attachment, or by visiting a malicious web site. The problem is caused by a programming bug in an Internet Explorer ActiveX control called scriptlet.typelib. This is by far the fastest growing virus distribution problem and ripe for a hugely destructive event - at least as large as the ILOVEYOU virus. Updating your virus detection software, while important, is not an effective solution for this problem. You must also close the hole. The hole can be closed in five minutes or less using tools available at Microsoft's security site:

Microsoft Security Program

The correction script may be run directly from:
Run Patch


Back to Titanic

Titanic Drawing by Harald Oanes
(oanes@online.no) with permission