PPRuNe Forums - View Single Post - W95.CIH/Chenobyl Virus
View Single Post
Old 22nd April 2000 | 20:20
  #2 (permalink)  
ExSimGuy
Guest
 
Posts: n/a
Smile

not too sure about this specific one but most of these "MS-Office" viruses add a macro that replicates itself to any other file of the same type (it may be Word, or Excel)

The "virus cleaners" try to remove the offending macro and then re-save. If they can't remove the macro they usually give you the option of deleting the virus. Either way, if the virus scanner detected the virus once and doesn't detect it after "cleaning", you can be pretty sure it has been "put to bed"

MS-Office programs have an option to alert you when you open a file if it has a macro, and give you the option of running the macro or not. That's a good way of ensuring these things can't replicate as most documents don't have macros. I have my computers set that way and I klnow which docs have genuine reasons for having a macro in them.

Of course, the real way is to have your anti-virus software right up to date; my secretary passed me a doc on floppy today that promptly activated my antivirus! Now he's gotta clean up his computer!

Be wary of ANY executable (.exe, .com, Word, Excel, HTML,) format files that you receive!!