[3075] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

New and destructive word macro virus

daemon@ATHENA.MIT.EDU (ivan)
Wed Sep 25 17:41:03 1996

Date: Wed, 25 Sep 1996 21:30:24 +0200
From: ivan <ivan@club-internet.fr>
Reply-To: ivan@club-internet.fr
To: www-security@ns2.rutgers.edu
CC: best-of-security@suburbia.net
Errors-To: owner-www-security@ns2.rutgers.edu

A new macro virus word has been found

Informations i have : 
- uses path variable to find a target
- deletes (!) the target

Type : assembles itself in Normal.dot through multiple word documents

Protection : nothing with Fprot, not recognized by antivirus software

Question : 

Except a change in normal.dot Size, how could we prevent these macros to
infect entire file (.doc & .dot) systems ?

Your answer is urgently needed, if you need a description of an infected
macro, we could send you one !!

If you are not sure of the seriousness of this message, let me know..
the point is this awful sh.. already deleted my DOS, NOTES, & WINDOW
directory.

Any suggestions...

Help urgently required ...


home help back first fref pref prev next nref lref last post