untangling_the_web

DID: 4046925
UNCLASSIFIEDil..Oft O.... lel)!(L l::JSE ONLY
you, but if you reply to or forward an email to a person with a JavaScript-enabled
email program, that person is vulnerable.
JavaScript is disabled in Microsoft Outlook and Outlook Express by adding them
to the Restricted Zone where the settings disable all Java, JavaScript, and ActiveX
controls (do not just set the zone to "high"; you must choose the Custom option and
do this manually). For detailed information on Email Wiretapping, see:
About's Email Wiretapping Article
http://antivirus.about.com/library/weekly/aa020501a.htm?once=true&
See What's Arriving in Your Email
Malicious hackers can easily disguise malicious file types sent via email using what
are called "double extension" files. For example, you may think you've received a
harmless graphic file in .gif or .jpg format when in fact the file is something else
altogether-such as an executable or a visual basic script-and opening it can infect
your computer. The reason you are being fooled is that Windows' default setting
hides certain file types that are "known" to the operating system, so what you see is
prettypicture.gifwhen the full file name is prettypicture.gif. vbs.
To see all file extensions, you need to make a simple change to Windows itself (not
to your browser or email tool). To enable show all files:
Windows 2000
• Open My Computer.
• Select the Tools menu and click Folder Options.
• Select the View Tab.
• Under the Hidden files and folders heading select Show hidden files and
folders.
• Uncheck the Hide protected operating system files (recommended)
option.
• Click Yes to confirm.
• Click OK.
Windows XP
• Click Start.
• Open My Computer.
o Select the Tools menu and click Folder Options.
• Select the View Tab.
546 UNCLASSIFIEDtfFQR QFFIGIAb \:lSi QNbY