[596] in Intrusion Detection Systems
Re: 1/2 CIAC Bulletin G-10: Winword Macro Viruses
daemon@ATHENA.MIT.EDU (Daniel O'Callaghan)
Wed Feb 14 11:54:11 1996
Date: Wed, 14 Feb 1996 14:23:14 +1100 (EST)
From: "Daniel O'Callaghan" <danny@miriworld.its.unimelb.EDU.AU>
To: ids@uow.edu.au
In-Reply-To: <31212CF1.3993@llnl.gov>
AU>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-ids
Precedence: bulk
Reply-To: ids
On Tue, 13 Feb 1996, Steve Longo wrote:
I wrote:
> >CIAC advisory about WinWord viruses. Well, that's great, but what
> >about MS-Excel? Is there a scanner for Excel auto-execute >spreadsheet
> > macros?
> I believe that virus affects certain type of macros and if it's not
> Visual basic macro related then Excel spreadsheet should be fine
> otherwise, we should get scanner for non word macros as well.
Well, I think it is pretty trivial to write an autolaunch excel
spreadsheet macro which trashes your HDD. OK, that's a trojan. I don't
know if these spreadsheet macros can replicate, but they could certainly
search directories, load new spreadsheets and save spreadsheets.
I've never seen one, BTW, but I'm pretty sure trojans are possible, if
not viruses.
Danny
