Re: Alien virus [Ref:C841195]

Subject: Re: Alien virus [Ref:C841195]
From: Tom Tomasovic <Tom -dot- Tomasovic -at- NA -dot- NWMARKETS -dot- COM>
Date: Fri, 17 Jan 1997 16:43:59 +0000

Have not seen this, but it sounds suspiciously
like a variation of the Word Concept Virus. Since
the macros are "normal", i.e., they LOOK
legitimate, the virus scanners may not recognize
them as malicious (I know in the case of the
original Concept Virus, several wierdly named
macros were a tipoff, and I am certain that is how
the virus scanners identified this one.) The
virus scanners out there are getting better at
this, but these little "pains in the a--" are real
easy to create. They are mostly just that (like
the common cold), but they travel VERY rapidly,
and are really annoying.

Good luck.

Regards,

Tom <<Tom -dot- Tomasovic -at- na -dot- nwmarkets -dot- com>>

You should be aware that the information contained
within this message is solely the opinion of the
writer (me). The people at NatWest have little
control over how I express myself, and they should
not be held responsible for anything I say
(unless, of course, I express it as a corporate
opinion).



______________________________ Reply Separator _________________________________
Subject: Alien virus [Ref:C841195]
Author: INTERNET TECHWR-L -at- LISTSERV -dot- OKSTATE -dot- EDU at Multimessage
Date: 1/17/97 1:50 AM


For the last week, about once or twice a day, when I open a document in MS
Word, a little dialog appears with "Alien" in the title bar. It display a
new message each time, such as:

Never trust an alien.
Hip Hip Hooray for the Alien.
The Alien lives.

I also believe there are three new macros in my Word documents called
AutoClose, AutoOpen, and FileSaveAs.

So far, no virus scan that we have tried detects this as a virus.

Anyone else seen this?

TECHWR-L (Technical Communication) List Information: To send a message
to 2500+ readers, e-mail to TECHWR-L -at- LISTSERV -dot- OKSTATE -dot- EDU -dot- Send commands
to LISTSERV -at- LISTSERV -dot- OKSTATE -dot- EDU (e.g. HELP or SIGNOFF TECHWR-L).
Search the archives at http://www.documentation.com/ or search and
browse the archives at http://listserv.okstate.edu/archives/techwr-l.html


Previous by Author: Re: Framemaker booklet [Ref:C736569]
Next by Author: Re: Information Mapping [Ref:C853672]
Previous by Thread: Re: Converting Word to Frame
Next by Thread: Re: Alien virus [Ref:C841195]


What this post helpful? Share it with friends and colleagues:


Sponsored Ads