Bugtraq mailing list archives
Re: Melissa Macro Virus
From: dgranzow () GUNZOUR ISBU DIGEX NET (Doug Granzow)
Date: Mon, 29 Mar 1999 10:52:07 -0500
Matthew Kirkwood (weejock () FERRET LMH OX AC UK) writes:
On Fri, 26 Mar 1999, Nate Lawson wrote:2. See if machine is already infected Check HKCU\Software\Microsoft\Office\Melissa? for the string "... by Kwyjibo"Surely just adding this key would provide effective safety? (Until modified versions hit the streets, anyway - ain't "open source" great :) Matthew.
This is probably not a good idea. Setting the key will prevent the virus from sending the email, but it will not by itself prevent the virus from spreading to other documents on your system. - If you email a legitmate document that happens to be infected to someone else, they will get infected, and if they were not previously infected, they will send *your* document to the first 50 addresses in their address book. - If at some point in the future you remove the registry setting, the first infected document you open will then be sent by the virus. Think about the documents you have on your system, and think about what would happen if one of the confidential ones was mailed to 50 people on your address list. Doug
Current thread:
- Melissa Macro Virus Aleph One (Mar 26)
- <Possible follow-ups>
- Re: Melissa Macro Virus Nate Lawson (Mar 26)
- Re: Melissa Macro Virus Matthew Kirkwood (Mar 27)
- Re: Melissa Macro Virus Nick FitzGerald (Mar 29)
- Re: Melissa Macro Virus Matthew Kirkwood (Mar 27)
- Re: Melissa Macro Virus Kuo, Jimmy (Mar 26)
- Re: Melissa Macro Virus Jim Reavis (Mar 26)
- Re: Melissa Macro Virus Doug Granzow (Mar 29)
- Re: Melissa Macro Virus Brett Glass (Mar 28)
- Bug in xfs Lukasz Trabinski (Mar 29)
- ICQ Webserver bug Kerb (Mar 29)
- IE 5.0 allows reading and sending local files to a remote server Georgi Guninski (Mar 30)
- Excel Virus Seree Visitseelwat (Mar 30)
- Re: IE 5.0 allows reading and sending local files to a remote Andrew Tulloch (Mar 31)
- Procmail scanning for hostile macros in Microsoft document e-mail John D. Hardin (Mar 31)
- Excel variant of Melissa Marcel de Haas (Mar 30)
- Re: Excel variant of Melissa Ken Pfeil (Mar 31)
- Bug in xfs Lukasz Trabinski (Mar 29)
- Re: Bug in xfs Roman Drahtmueller (Mar 30)