Re[2]: Alien virus [Ref:C854739]

Subject: Re[2]: Alien virus [Ref:C854739]
From: Tom Tomasovic <Tom -dot- Tomasovic -at- NA -dot- NWMARKETS -dot- COM>
Date: Mon, 20 Jan 1997 17:14:40 +0000

Comments: To: Ron Rothbart <ron -dot- rothbart -at- DOCUMENTUM -dot- COM>

Brian:

Actually, SCANPROT simply warns you if any
document you try to open contains Word macros.
This is useful, since macros can only be stored in
templates. Opening a document which is actually a
template is a pretty good indication that
something funny is going on. In any case,
SCANPROT allows you to open the document safely by
copying the text of the doc to a "clean" document.

The upshot of all this is that SCANPROT seems to
offer protection from any of the Word macro
viruses (however, someone will probably think of a
way around it if they haven't already).

If you are talking about the "cleanup" routine
which can be done in conjunction with SCANPROT,
you are probably right. I would guess that was
written to deal specifically with the Concept
virus.

Just my $.02

Regards,

Tom <<Tom -dot- Tomasovic -at- na -dot- nwmarkets -dot- com>>

You should be aware that the information contained
within this message is solely the opinion of the
writer (me). The people at NatWest have little
control over how I express myself, and they should
not be held responsible for anything I say
(unless, of course, I express it as a corporate
opinion).



______________________________ Reply Separator _________________________________
Subject: Re: Alien virus [Ref:C854739]
Author: INTERNET TECHWR-L -at- LISTSERV -dot- OKSTATE -dot- EDU at Multimessage
Date: 1/18/97 2:59 AM


Hi,

We had a similar problem with the "Concept" virus. Microsoft has since
released a Word template that will scan files on your drive, and installs
macros in the global template that notify you if a document you are opening
contains macros. Filename is "scanprot.dot" and is available from the
Microsoft web site.

I believe at the moment, scanprot only detects "Concept" virus, so it
won't find anything in your files when it scans. However, the protection
macros that it installs should detect the "Alien" macros. If it does,
it will ask if you want to disable the macros. You can then re-save
the file sans macros and it should be clean from there.

We use McAfee, and it's been pretty good at catching macro viruses.
Low-tech solution: go into the infected documents & templates and
delete any unusual macros.

Good Luck,

Brian

______________________________ Reply Separator _________________________________
Subject: Alien virus
Author: Ron Rothbart <ron -dot- rothbart -at- DOCUMENTUM -dot- COM> at SMTP
Date: 1/16/97 5:45 PM

I also believe there are three new macros in my Word documents called
AutoClose, AutoOpen, and FileSaveAs.

So far, no virus scan that we have tried detects this as a virus.

Anyone else seen this?

TECHWR-L (Technical Communication) List Information: To send a message
to 2500+ readers, e-mail to TECHWR-L -at- LISTSERV -dot- OKSTATE -dot- EDU -dot- Send commands
to LISTSERV -at- LISTSERV -dot- OKSTATE -dot- EDU (e.g. HELP or SIGNOFF TECHWR-L).
Search the archives at http://www.documentation.com/ or search and
browse the archives at http://listserv.okstate.edu/archives/techwr-l.html


Previous by Author: Re: Lingo [Ref:C869573]
Next by Author: Apologies
Previous by Thread: locating the techwr-l newsgroup
Next by Thread: late thanks for fee advice answers


What this post helpful? Share it with friends and colleagues:


Sponsored Ads