|
|
By Hervey Allen (hervey@oregonuoregon.edu)
Last November, someone in Argentina sent a new type of computer virus to the Network Associates' McAfee Anti-Virus Center in the United States.
The new virus, called BubbleBoy, is unique in that it exploits a feature of Microsoft Outlook in conjunction with Internet Explorer 5 (IE 5). If Internet Explorer 5 is installed and the user clicks on an email message in Outlook, Outlook Express, or Eudora Pro 4.2 with "Preview" turned on, the virus can execute even if the email message hasn't actually been opened.
This happens because of a security hole in IE 5. If you have installed IE 5 and use the email "preview" function in Outlook, Outlook Express, or Eudora Pro 4.2, programs can be executed without your knowledge.
The BubbleBoy virus is considered to be extremely rare because it is located only in virus research centers. However, similar viruses are very likely to become more commonplace in the future.
Windows 98/2000 Users: All Windows 98/2000 users have IE 5 installed by default. If you use Windows 98/2000 in conjuction with Microsoft Outlook, Express, or Eudora Pro 4.2, you are vulnerable to this type of virus if you haven't updated your antiviral definition files or your IE 5 software. Preventive Measures Microsoft's patch. To avoid being vulnerable to IE 5's security problem, you can download a security patch from Microsoft at http://www.microsoft.com/Security/Bulletins/ms99-032.asp
The IE 5 patch. If you use Microsoft Outlook products for email, or if you use Eudora Pro 4.2 under Windows with the preview pane turned on, you may want to consider downloading the IE 5 patch. We recommend getting the patch directly by downloading it from our local server at ftp://public.uoregon.edu/ . Then open the links to Antivirus -> Other Utilities -> BubbleBoy and download the file q240308.exe
Note: You need this patch only if you are running Internet Explorer version 5 and use the preview functions of Outlook, Outlook Express, or Eudora Pro 4.2.
Antivirus updates. BubbleBoy is just one more reason why you may want to make a habit of updating your antiviral definition files on a regular basis. The latest versions of Norton AntiVirus and other antiviral programs will catch BubbleBoy and similar viruses before they can execute and cause problems:
Norton AntiVirus. Norton AntiVirus makes updating easy through the LiveUpdate feature of the product. If you don't know how to use LiveUpdate, contact Microcomputer Services (346-4412).
McAfee. If you have a McAfee antiviral product you can update your virus definitions at any time by visiting http://download.mcafee.com/updates/updates.asp