Results 1 to 11 of 11

Thread: EMail security

  1. #1
    Bronze Lounger
    Join Date
    Feb 2001
    Location
    England
    Posts
    1,306
    Thanks
    0
    Thanked 0 Times in 0 Posts

    EMail security

    For those not running Zone Alarm : visit the site mentioned here.
    For those running ZA already, ditto, but note what it does. Makes you feel a good deal safer, yes?

    After confirming your email address, you will be sent 4 emails with pseudo-infections. They won't harm you, but if any of the attachments execute (unless you insist all the way down the line) you aren't protected.
    Get your email test <A target="_blank" HREF=http://www.gfi.com/emailsecuritytest/>here </A>

  2. #2
    5 Star Lounger
    Join Date
    Feb 2001
    Location
    Youngstown, Ohio, USA
    Posts
    705
    Thanks
    1
    Thanked 0 Times in 0 Posts

    Re: EMail security

    Outlook 2000 without SP2 let all four tests through. The ActiveX test was stopped in its tracks by the Restricted Zone setting, Mime & VBS were stopped by InoculateIT, but the CLSID got through unhindered. SP2 added, and the attachments for the Mime, VBS, and CLSID were blocked.

  3. #3
    4 Star Lounger pccoyle's Avatar
    Join Date
    Apr 2001
    Location
    Auckland, Auckland, New Zealand
    Posts
    535
    Thanks
    3
    Thanked 2 Times in 2 Posts

    Re: EMail security

    Our Mail Marshall server scanner picked up the Mime VBS and CLSID messgaes, while ZA & IE settings stopped the Active X. Davids comments on SP2 are pleasing, as I have updated one PC running 2000, and am about to apply this to mine.
    <img src=/S/flags/NewZealand.gif border=0 alt=NewZealand width=30 height=18> <img src=/S/2cents.gif border=0 alt=2cents width=15 height=15>
    Paul Coyle
    Approach love and cooking with reckless abandon

  4. #4
    Super Moderator
    Join Date
    Dec 2000
    Location
    Renton, Washington, USA
    Posts
    12,560
    Thanks
    0
    Thanked 4 Times in 4 Posts

    Re: EMail security

    <P ID="edit" class=small>Edited by DaveA on 27-Nov-01 10:44.</P>Nortons' got three of them and Office 2002 got the fourth.

    Now running HP Pavilion a6528p, with Win7 64 Bit OS.

  5. #5
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Swanzey, New Hampshire, USA
    Posts
    1,707
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: EMail security

    My Norton AntiVirus picked up all 4 items. One of the files really gave it a workout. I can't remember if it was the 3rd or 4th? But they were all blocked. I feel good. <img src=/S/groovin.gif border=0 alt=groovin width=21 height=21>

    Thanks for the referral. <img src=/S/grin.gif border=0 alt=grin width=15 height=15>

    Jeff
    Jeff
    simul iustus et peccator

  6. #6
    5 Star Lounger
    Join Date
    Feb 2001
    Location
    Youngstown, Ohio, USA
    Posts
    705
    Thanks
    1
    Thanked 0 Times in 0 Posts

    Re: EMail security

    I think Microsoft went really overboard with the security settings in the SP2 patch - especially that in a stand-alone or internet-mode Outlook installation there is no way the user can reassign class 1 and class 2 extensions, even with Xteq's registry hacks. However, I can see that it is good in an office setting where you don't want to have to rely on expert users to keep your network safe. (Or at home, where you don't want to trust your security to Wife & Kids Inc.) SP2 was able to block all of the attacks without having to rely on the user, or even on an antivirus program. And for more advanced users, we can still get around the attachment restrictions by zipping or renaming. <img src=/S/grin.gif border=0 alt=grin width=15 height=15>

  7. #7
    3 Star Lounger
    Join Date
    Jan 2001
    Location
    Seattle, Washington
    Posts
    320
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: EMail security:WARNING

    I have not confirmed this yet, but I believe this test has corrupted 1) the Windows Management Information service (now gone), and 2)System Restore. I would suggest NOT using this with XP!!!

  8. #8
    Bronze Lounger
    Join Date
    Feb 2001
    Location
    England
    Posts
    1,306
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: EMail security:WARNING

    Hi
    I have used both these XP features since running the email test. Neither seems to be different in any way.
    I restored my system to 27th November (at a time prior to an abortive attempt to install Encarta - disk 1 wasn't what was stamped on its upper surface, it was the same as the Installation and Resources disk). Rather than uninstall, I went back to before I'd put it on.
    I used Manage to instruct my Network Connections Service to reenable.
    What you describe sounds much more like a real virus...

  9. #9
    Uranium Lounger
    Join Date
    Dec 2000
    Location
    Los Angeles Area, California, USA
    Posts
    7,453
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: EMail security

    Hi Mel:

    What is ZA supposed to change? I asked for all 4 & got 4 messages. When I tried to open the first 3, NAV kicked in & stopped them from running. The 4th one opened as text (I think).

  10. #10
    Bronze Lounger
    Join Date
    Feb 2001
    Location
    England
    Posts
    1,306
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: EMail security

    Hi Phil
    In ZoneAlarm/Security settings right at the bottom of the page is a setting : 'Enable Mail Safe Protection to Quarantine e-mail Script Attachments'. This is what got two of the test pseudoviruses.
    I don't run NAV on XP (only recently bought it for 2k, and was not prepared to fork out again for 2002). I run AVG, but with the email test , Zone Alarm MailSafe got in first on two occasions. I believe XP trapped the other two, as I run OE in the Restricted Zone, and I got the 'Do you want to Run or Save' box.
    Just after that I was sent an I-Worm/BadTrans, which I saved and ran AVG over. It recognised it. On checking the payload, I deliberately infected myself with it and did a full system scan - before re-booting of course. AVG found it, identified it and disinfected my system.
    The two freebies Zone Alarm and AVG along with proper security in OE seem to be doing a sterling job - even in XP.

    Rgds

  11. #11
    3 Star Lounger
    Join Date
    Jan 2001
    Location
    Seattle, Washington
    Posts
    320
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: EMail security:WARNING

    Update: Like I said, my warning was unconfirmed, and it now looks like the problem was (again at this point unconfirmed) an evaluation copy of McAfee Quick Clean. I am in contact with Microsoft, and the tech has advised me that EZClean has had problems with XP, resulting in corruption of the WMI, and I did start using QuickClean at about the same time as I downloaded the email test. I must say that the coincidence of having the test put a copy of the WMI on my desktop and then to have it disappear is still to my mind pretty scary..... I'll keep ya posted.
    (At this point it looks like it's NOT a real virus, whew!)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •