VIRUS - EOUG conference CD - Warning!!!!!!

From: Tony Jambu 041 985 2628 <tjambu_at_falcon.telecom.com.au>
Date: 1996/05/09
Message-ID: <4msb34$86t_at_newsserver.trl.OZ.AU>#1/1


People with EOUG Conference CD

Warning. There appear to be a virus on the CD called Concept. It is attached to CD:\EOUG-CD\PAPERS\408.doc Word document. Below is a description of the virus, courtesy of Mcafee virus scan.

  Concept is a small, yet sophisticated program that attaches itself to   Word documents. It is not particularly destructive, but can be annoying.   The Concept virus creates a change with the "Save As" function. The user   will not be able to choose the drive or the type of file when saving   documents. The "TEMPLATES" radio button will be grayed. The macro will   cause the document to behave as a template file. Upon infection, the   virus will search for the macros, "Payload" and "FileSaveAs" among   NORMAL.DOT templates. If either of these macros exist, Concept assumes   that the system is already infected, and aborts. If neither of these   files exist, it begins its infection process by copying its viral macros   to the template and displaying a dialog box, which contains the number   "1". Once a Macro virus is running, it can copy itself to other   documents, delete files, and create general problems in a system. These   things occur without the user explicitly running the macro. Once Concept   is active on a system, it adds the following macros: AAAZAO, AAAZFS, and   Payload. Two additional macros appear called "AutoOpen" and "FileSaveAs".   If these macros existed previously, the contents will be changed. These   macros can be viewed in the TOOLS, MACRO menu.

I only found out of after talking to someone from Australia that also attended the conference. What I found out was of the 4 CDs. Two had the virus detected. One played only music and the 4th did not detect the vires. That doesnot mean it is not there.

I would have been really pisXX XXX if that had affected all my document. The EOUG conference committee should really be more carefull about it. I home someone from the EOUG committee gets this message.

ta
tony  

-- 
 _____       ________ / ___|Tony Jambu, Database and Oracle WebSys Consultant
  /_  _        /_ __ /     |Wizard Consulting,Aust (ACN 065934778)
 /(_)/ )(_/ \_/(///(/_)/_( |CIS: 100250.2003_at_compuserve.com FAX:+61-3-94163559
 \_______/                 |EMAIL:TJambu_at_wizard.com.au PHONE:+61-3-94122905
Received on Thu May 09 1996 - 00:00:00 CEST

Original text of this message