| [ windows ] in KIDS 글 쓴 이(By): Convex (4ever 0~) 날 짜 (Date): 1999년 3월 28일 일요일 오후 12시 45분 18초 제 목(Title): 컴퓨터] "e-메일 통한 치명적 바이러스 주� 컴퓨터] "e-메일 통한 치명적 바이러스 주의" e-메일을 감염시켜 마이크로소프트의 워드 97이나 워드2000 프 로그램을 탑재한 컴퓨터를 공격하는 새로운 형태의 컴퓨터 바이 러스가 곧 커다란 문제를 일으킬 수있다고 미 카네기멜론대학 연구진이 27일 밝혔다. 카네기멜론대학의 `컴퓨터 응급대응팀(CERT)'은 지난 26일 `멜리사 매크로' 혹은`W97M-멜리사 바이러스'로 명명된 이 바 이러스의 존재를 전해듣고 밤샘작업을 통해 분석작업을 벌였다 고 밝히고 “CERT 창립이후 10년동안 일반에게 공표해야 할 정 도로 중요한 바이러스를 발견한 것은 이번이 두번째”라고 설명 했다. CERT는 지난 94년 처음으로 컴퓨터 침입자들이 패스워드 를 알아낼 수있도록 해주는 바이러스에 대한 주의를 공개적으 로 촉구한 바 있다. 캐서린 핏헨 CERT 팀장은 “전세계 각지에서 이 바이러스에 대한 보고가 들어오고 있다”며 “30일이 되면 이 바이러가 큰 문제로 부상할 것”이라고 경고했다. 문제의 멜리사 바이러스는 사용자가 감염된 워드 형태의 문 서를 열때 e-메일 주소록을 읽어들인 뒤 감염된 메시지를 주소 록에 등재된 최초 50개 주소까지 자동으로 보내면서 증식한다 고 CERT는 설명했다. 또 이 바이러스는 원치않는 e-메일을 재생산하거나 전송, e -메일을 전송하는 컴퓨터와 메일 서버에 과부하를 걸리게 한다 . 그러나 멜리사 바이러스는 컴퓨터의 기억장치와 프로그램에 는 손상을 주지않는 것으로 파악되고 있다. 감염된 메시지는 바이러스를 보낸 컴퓨터 사용자의 이름으로 “중요 메시지”라는 제목을 달고있으며 내용에는 “당신이 요 청한 문서입니다…다른 사람에게 보여주지 말 것.”이라고 적 혀있다. (피츠버그AP/연합뉴스) March 28, 1999 New Fast-Spreading Virus Takes Internet by Storm By MATT RICHTEL AN FRANCISCO -- A rapidly spreading computer virus forced several large corporations to shut down their e-mail servers on Friday night as it rode the Internet on a global rampage, several leading network security companies reported Saturday. The security companies said early reports of the virus, which is carried by e-mail, led them to believe that tens of thousands of home and business computers had been infected on Friday alone. The virus reproduces itself exponentially, they said, trying to use each infected message to send 50 more infected messages. "This is the fastest-spreading virus we've seen," said Srivats Sampath, general manager for the McAfee Software division of Network Associates, a Santa Clara company that makes anti-virus software. Network security experts said that the virus appeared to do no harm to the machines it infected and that individuals could easily disable it. But they said its purpose is to interrupt networks by replicating itself so rapidly that it overwhelms networks and e-mail servers, the electronic post offices that direct message traffic. E-mail infected with the virus, which its creators call Melissa, has a topic line that begins, "Important Message From." Next is the sender's name, which is often the name of a friend, fellow worker or someone else known to the recipient. The message within the e-mail is short and innocuous: "Here is that document you asked for ... don't show anyone else ;-)" Attached to it is a 40,000-byte, or 40K, Microsoft Word document named list.doc. When the recipient opens list.doc, the Melissa virus automatically searches for an e-mail address book. It then sends a copy of itself -- the message and attachment -- from the recipient to the first 50 names it finds in the recipient's address book, which accounts for the rapid acceleration across the Internet. The virus is known to spread rapidly with two popular e-mail programs, Microsoft Outlook and a slimmed-down version of the same program, Microsoft Outlook Express, which is part of the Windows 98 operating system and is often installed with Windows 95. Network security administrators said they had seen no evidence that Melissa was able to open and use the address books in other e-mail programs, but they did not rule out the possibility that it could and would do so. Several anti-virus software makers posted software on their Web sites that their customers can download to detect the virus-encoded message and refuse it. A fix for the general public was available on www.sendmail.com, the Web site of Sendmail, the Emeryville company whose post-office software is often used to direct mail on the Internet. Eric Allman, a co-founder of Sendmail, said he was concerned that the problem would worsen on Monday morning when employees find these messages in their e-mail in-boxes. "This will get into a lot of mail boxes and lay dormant," he said. "When employees come in at 8 a.m. and read these messages, it will cause an explosive growth of the virus." Allman characterized the virus' virulence as "not the worst I'd seen, but it's pretty bad." He added, however, that it appeared to be the fastest-replicating virus he had seen. Individuals can avoid contracting or spreading the virus simply by not opening the attachment that accompanies the e-mail. Opening the message alone will not cause the virus to copy the address list and send itself out. Alternatively, users can disarm the virus by disabling the type of program that contains it -- "macros," which are small applications used to automate tasks in Microsoft Word documents. Disabling macros in Microsoft Word will render the virus ineffective. Officials from Microsoft said they were not certain of the magnitude of the virus and emphasized that it could be easily disarmed. Adam Sohn, a company spokesman, said, "If folks are careful about what runs on their machine, they'll always be fine." The virus overwhelmed employees on Friday at GCI Group, a public relations firm with offices throughout the United States. One contract employee, who exchanges mail with a number of company employees, said she received more than 500 messages during the day. "It hosed my entire day," said the employee, Leigh Anne Varney. "You can't print the words I used. I've never had this happen before." This hardly is the first virus to attack and spread automatically via e-mail, but it is the first to move from being a controlled, essentially experimental form "into the wild," said Dan Schrader, director of product marketing for Trend Micro, an anti-virus software maker in Cupertino. The rapid spread of the program was reminiscent of a 1988 program, known as a worm, written by Robert Tappan Morris, then a graduate student in computer science at Cornell University. Morris' program spread through the Internet with remarkable speed, ultimately disabling more than 6,000 computers. However, the Internet was tiny in 1988 compared with the size of today's network. As a result the potential for the spread of the program is truly vast. "We haven't seen anything impact this many people on the Internet in a long time," said Schrader. He said that three of his company's customers had temporarily shut down their e-mail servers to delete the infected mail. Whoever wrote the virus also left the message "W97M -- Melissa." The note said the virus was created by "Kwyjibo," which Trend Micro officials speculated is a reference to the television show "The Simpsons." In an episode of the Simpsons titled "Bart the Genius," Bart Simpson wins a Scrabble game by using the "word" Kwyjibo. The theory dovetails with a second impact of the virus: Once the virus has infected a computer, it will type a message on the screen when the time of day corresponds to the date (on March 26 it would be 3:26). The message reads: "Twenty-two points, plus triple-word-score, plus 50 points for using all my letters. Game's over. I'm outta here." -NYT --,--`-<@ 매일 그대와 아침햇살 받으며 매일 그대와 눈을 뜨고파.. 잠이 들고파.. Till the rivers flow up stream | Love is real \|||/ @@@ Till lovers cease to dream | Love is touch @|~j~|@ @^j^@ Till then, I'm yours, be mine | Love is free | ~ | @@ ~ @@ |