2010-01-18
This has been resolved mostly on Outlook but you may want to check just in case. Problem now has become that
the few spam email that get through filters are often very dangerous. Simply because they have figured ways around the
spam/virus filters, they are not going to waste all that effort on just email.
2002-01-03
I finally got around to documenting a security block for HTML email if you are using
Outlook Express. At least this is what I do on a basic Windows system(no special software).
HTML email is the curse of the 20th century. The potential for malicious attacks using
this type of email is tremendous. Even the most novice hacker can cripple your system.
The abuse potential is so obvious even people not thinking of hacking(like myself)
can easily come up with simple attacks.
Although this solution is documented for Microsoft Outlook Express V6 with Internet Explorer V5+ the principal is the same for all versions of Outlook and Explorer. The problem occurs on most email software that display HTML e-mail so don't point too many fingers. This does not stop viruses if you open e-mail attachments. It does stop the major security threat posed by HTML email. The email is still viewable, just secure against attacks(unless you open attachments).
Even if you are running the latest virus detection software you should perform the tasks below. The problem is these new viruses attack in hours so your software company does not have time to react. Old viruses usually spread by manually distributing software(that someone was willing to accept) giving a lot more time for companies to react. Virus protection software can give you a false sense of security. Don't get me wrong, they are needed and they do a great job. Unfortunately in today's environment they are too often like catching a thief several days after the event. Your "stuff" is probably gone or trashed already... hope you have backups.
There is a security patch at Microsoft if you are using Outlook 2000. It requires Microsoft Office 2000 with SR1 patch. The disadvantage is it stops you from downloading ANY program... even ones you want.
The steps below should accomplish about the same thing... maybe more(you have control).
This will require you make adjustments in Outlook Express and Internet Explorer. Even if you use another browser the settings must be changed in Internet Explorer.
I am getting lot's of attacks of this type, none have gotten through my new settings. I also filter many messages but most of these HTML viruses look like they came from a friend so filters don't work.
Now remember, you are still going to get variations of this HTML virus crap but you now have a defense that blocks all of them in email. Just don't open the attachment.
Now go to any place that scans you computer for viruses to make sure you currently have no viruses. I suggest http://antivirus.com/ ... they work for me and they are FREE!
Hope it helps. As a final note.... Don't open email attachments!