Bugtraq mailing list archives

Re: Melissa Macro Virus


From: brett () LARIAT ORG (Brett Glass)
Date: Sun, 28 Mar 1999 21:18:23 -0700


No. This key would only prevent the 50-message burst of e-mail. However, the
user's NORMAL.DOT template would still be infected. So would every document
he or she opened or created. And the moment one of those documents hit
a machine without the key that had Outlook running.... Blammo! Another salvo
of messages.

--Brett

At 12:25 PM 3/27/99 +0000, Matthew Kirkwood wrote:
On Fri, 26 Mar 1999, Nate Lawson wrote:

2.  See if machine is already infected
    Check HKCU\Software\Microsoft\Office\Melissa? for the string "... by
Kwyjibo"

Surely just adding this key would provide effective safety?  (Until
modified versions hit the streets, anyway - ain't "open source" great
:)

Matthew.



Current thread: