Re: Melissa Macro Virus

From: Darryl Braaten (Darryl.Braatenat_private)
Date: Mon Mar 29 1999 - 14:05:08 PST

  • Next message: IAKOVLEVat_private: "Re: Lotus Notes Encryption Bug"

    I have been looking at the code that Nate Lawson posted.  The macro does not
    send mail to the first 50 people in your address book, but 50 people in
    every address book you have.
    Depending on how your companies Exchange server is configured you are going
    to send mail to 50 * (number of address lists).
    
    Darryl
    
    -----Original Message-----
    From: Brett Glass [mailto:brettat_private]
    Sent: Sunday, March 28, 1999 8:18 PM
    To: BUGTRAQat_private
    Subject: Re: Melissa Macro Virus
    
    
    No. This key would only prevent the 50-message burst of e-mail. However, the
    user's NORMAL.DOT template would still be infected. So would every document
    he or she opened or created. And the moment one of those documents hit
    a machine without the key that had Outlook running.... Blammo! Another salvo
    of messages.
    
    --Brett
    
    At 12:25 PM 3/27/99 +0000, Matthew Kirkwood wrote:
    >On Fri, 26 Mar 1999, Nate Lawson wrote:
    >
    >> 2.  See if machine is already infected
    >>     Check HKCU\Software\Microsoft\Office\Melissa? for the string "... by
    >> Kwyjibo"
    >
    >Surely just adding this key would provide effective safety?  (Until
    >modified versions hit the streets, anyway - ain't "open source" great
    >:)
    >
    >Matthew.
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:40:56 PDT