[10035] in bugtraq
Re: Melissa Macro Virus
daemon@ATHENA.MIT.EDU (Brett Glass)
Mon Mar 29 16:52:33 1999
Date: Sun, 28 Mar 1999 21:18:23 -0700
Reply-To: Brett Glass <brett@LARIAT.ORG>
From: Brett Glass <brett@LARIAT.ORG>
X-To: Matthew Kirkwood <weejock@FERRET.LMH.OX.AC.UK>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <Pine.LNX.3.96.990327122330.31438C-100000@ferret.lmh.ox.ac. uk>
No. This key would only prevent the 50-message burst of e-mail. However, the
user's NORMAL.DOT template would still be infected. So would every document
he or she opened or created. And the moment one of those documents hit
a machine without the key that had Outlook running.... Blammo! Another salvo
of messages.
--Brett
At 12:25 PM 3/27/99 +0000, Matthew Kirkwood wrote:
>On Fri, 26 Mar 1999, Nate Lawson wrote:
>
>> 2. See if machine is already infected
>> Check HKCU\Software\Microsoft\Office\Melissa? for the string "... by
>> Kwyjibo"
>
>Surely just adding this key would provide effective safety? (Until
>modified versions hit the streets, anyway - ain't "open source" great
>:)
>
>Matthew.
