|
|
The Hebrew University of Jerusalem
Computation Center
News bulletin #153
05-May-2000
Today's topics:
- New Email virus (I LOVE YOU).
- New Bezeq Tariffs - addendum.
o New Email virus: Since yesterday a new virus is being spread over the
Internet. It is identified by a subject line of ILOVEYOU, but
mutations of it start appearing as well. The virus is based on
Outlook Express ability to execute automatically scripts embeded
inside Email messages. You don't have to do any special action to run
it; simply open the message and it will execute.
There is no "cover-all solution" for these problems. In order to
defeat them you have to disallow automatic script execution; however,
a lot of sites depend on these scripts. Hence, we can't give a true
recomendation about the actions to take. What we suggest is as
follows:
1. Use the latest antivirus software (which can be downloaded from
http://shum.huji.ac.il/cc/nav.shtml). The problem with Antivirus
software is that it gets updated for new viruses usually after they
start attacking.
2. Using the navigator's control panel disable Java, JavaScript,
ActiveX, etc. Again - a lot of inocent sites depend on these
extensions, so some sites might not function correctly after this
change.
3. Outlook Express and Internet Explorer can be set to not run the
scripts automatically by selecting a higher security level in the
control panel of them. As far as we know (but we might be wrong)
the VBS (Visual Basic scripts) which is used by this virus can be
executed only on Outlook and Internet Explorer.
4. For exact details of how to do the above you can consult the
bulletin of the American computer incidents response team at
http://www.cert.org/tech_tips/malicious_code_FAQ.shtml steps
o Bezeq new tariffs: There was a mistake in the URL we sent in the last
bulletin (the underscores were missing). Please access
http://www.bezeq.co.il and continue from there. A few notes:
1. In the list of ISP numbers our number is wrong; however, when you
actually select the number to use you can only select the correct
number.
2. In order to get the ISP rate you *must* register and specify the
ISP number you are calling; you get the ISP rate only when calling
that number.
__Yehavi:
|
