XP security

[Lisa]

Hi,

We use outside pop/smtp server for email service. So everyone has their own
address book maintained in their email client. Yesterday one user received an
email which sent on behave of his friend and asked him if he wants to
schoolmate reunion, then he clicked OK and it opened a website for him. What
happen is he sent an email to everyone in his address after he clicked
something on the website. He has over thousand of addresses in his address
book. What a mess! I have to send alert to everyone to ignore his original
email. After that I added that domain to blocked list in the spam filter, but
my boss wants to know how we can prevent this problem happen again in the
feature. Does anybody know how to prevent other program to access address
book besides the Outlook/Thunderbird... I checked firewall, I don't think it
can do the job. Need help! Please advice!

Any help will be appreciated!

Lisa

 

[Ben M. Schorr - MVP (OneNote)]

What version of Outlook are you using? What browser are you using and
what version? Does your firewall offer any anti-virus/anti-phishing
capabilities?

When was the last time you did any security education for your users?

--
-Ben-
Ben M. Schorr, MVP
Roland Schorr & Tower
http://www.rolandschorr.com
http://www.officeforlawyers.com
Author - The Lawyer's Guide to Microsoft Outlook 2007:
http://tinyurl.com/5m3f5q

 

[Lisa]

Hi Ben,

Thank you for your reply. The user uses Thunderbird as the email client. The
email body provide a web link, I believe the user clicked the link and
browsed the website. He uses Firefox as Internet browser. He uses XP with
SP2. Please advice!

Thanks again,

Grace

 

[Ben M. Schorr - MVP (OneNote)]

O.K. And no anti-malware software? AntiVirus/AntiSpyware? What version
of Firefox?

--
-Ben-
Ben M. Schorr, MVP
Roland Schorr & Tower
http://www.rolandschorr.com
http://www.officeforlawyers.com
Author - The Lawyer's Guide to Microsoft Outlook 2007:
http://tinyurl.com/5m3f5q

 

[Lisa]

We use TrendMicro for AntiVirus/AntiSpyware. Not sure for the Firefox
version. Thanks.

Grace

 

[Mick Murphy]

Her are 3 programs to combat Spyware and Malware.
Explanations attached to them.
You don't say whether the User has cleaned their machine yet!

And, DRUM intio their heads, NEVER open links in emails!

http://www.spybot.info/en/index.html

Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update it, and scan your System once a fortnight.

http://www.malwarebytes.org/mbam.php

Malwarebytes is as the name says, a Malware Remover!
For the Free version scroll down their page to either download from
Download.com, or Major Geeks.com

Download, install, and update.

 

[Lisa]

Hi Mick,

Thank s for your reply. I updated TrendMicro Anti-virus/anti-spyware
software and csan for the whole system, and didn't find any
virus/spyware/grayware.

Thanks,

Lisa