At 12:05 PM 9/25/2001, Todd Francis wrote:
>2. UPDATE Internet Explorer to IE 5.01 SP2 or better. (Don't install IE
>6.0 on any PC's here  yet. IE 5.01 SP2 or IE 5.5 are
>ok for now.)

IE5.5 must be patched to Q299618 level or have Service Pack 2
installed.  See
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS01-027.asp
-- the upcoming SP2 for IE5.5 mentioned there has been released, so that
would be the preferred patch method (use the Windows Update tool).  Figure
on an up-to-20-megabyte download...

Win2k users can disable IIS by Start >> Settings >> Control Panel >>
Add/Remove Programs >> Add/Remove Windows Components >> uncheck the box
marked Internet Information Services.

To avoid being infected by infected websites, disable JavaScript in your
browser.  Netscape: Edit >> Preferences >> Advanced >> uncheck the
JavaScript box.  IE5.x: Tools >> Internet Options >> Security >> uncheck
the box "Script java applets"

Disabling Javascript means that many websites won't work properly.  You may
need to re-enable it on a case-by-case basis -- but remember that the only
way to be *sure* an infected system is clean is to reformat the drive(s),
reinstall the operating system from scratch, reinstall applications, and
reload data from backups.

And once again, using any version of Outlook or Outlook Express is like
wearing a "Kick Me" sign on your back...

Note that VOS (Vanagon Operating System) versions DJ and DF are not
vulnerable to these exploits.

david

David Beierl - Providence, RI
  http://pws.prserv.net/synergy/Vanagon/
'84 Westy "Dutiful Passage"
'85 GL "Poor Relation"