Article View: ott.online
Article #142RESOUR> Warning! PrettyPark & Worm: Two New Viruses for Microsoft Wo
From: Colin R. Leech
Date: Sat, 12 Jun 1999 00:00
Date: Sat, 12 Jun 1999 00:00
169 lines
7543 bytes
7543 bytes
Forwarded from comp.internet.net-happenings: > From: K-12 Educators Interested in Educational Administration > [mailto:K12ADMIN@LISTSERV.SYR.EDU] On Behalf Of Bonnie Bracey > Sent: Friday, June 11, 1999 2:20 AM > To: K12ADMIN@LISTSERV.SYR.EDU > Subject: Warning! PrettyPark & Worm: Two New Viruses for Microsoft Word > and Outlook users > > Warning! PrettyPark & Worm: > Two New Viruses for > Microsoft Word and Outlook users > > Two new Microsoft Word 97 and Microsoft 2000 viruses, named PrettyPark and > Worm, were discovered over this past weekend and are said to be spreading > widely on the Internet. > > These viruses come as files attached to e-mail and are currently > circulating > the Internet with the file names "PrettyPark.EXE" and "zipped_files.exe." > > The e-mail containing one of these viruses may look similar to the sample > e-mail provided below, or it may have no subject line at all. You can > become > infected with these viruses by downloading and opening an infected > Microsoft > Word document attached to an e-mail. You can also become infected by > downloading an infected file inadvertently sent to you by an infected > friend > or colleague. Once the downloaded file is opened, an error message may be > displayed and the virus will spread to Microsoft Word files created or > edited > on the infected computer. These viruses will also delete files on your > computer. > > Note! This infected e-mail may come from, or look like it came from someone > you know! Be alert for short e-mails that ask you to download an attached > file. And always be cautious in downloading files from people or sources > you > do not know. > > Once your computer is infected, it will spread the viruses in one of two > ways. If you also use Microsoft Outlook, the viruses will be automatically > e-mailed as an attached file to the people in your Outlook address book. > Those people will receive an e-mail like the one provided below. Second, > you > will inadvertently infect others if you send them infected Microsoft Word > files attached to an e-mail message. Once infected, the viruses will make > changes to your Microsoft Word settings that make it easier for it to > spread > itself. > > If you think you may have downloaded these viruses, please go to one of the > sites listed below for instructions on how to remove them. > > There are no known effects to the AOL software at this time. > > ** Begin sample e-mail message ** > Subj: <no subject> > Date: 6/10/99 4:44:05 PM Eastern Daylight Time > > File: zipped_files.exe (210,432 bytes) > > Hi! > > I received your email and I shall send you a reply ASAP. > > Till then, take a look at the attached zipped docs. > > bye > > ** End sample e-mail message ** > > How to protect yourself from the these viruses: > * Install the latest versions anti-virus software on your computer as soon > as > possible. These viruses are very new and you should update your anti-virus > software as soon as possible. > * If you already have anti-virus software, make sure it is up to date. Most > anti-virus companies have posted updates on their Web sites that will > combat > the PrettyPark and Worm viruses. Some of those sites are listed below. > * If you use Microsoft Word, there are > <A HREF="aol://4344:2452.macro.26156796.607189184">steps you can take</A> > to > protect yourself by turning on macro virus detection in your Microsoft Word > application. > > For more information on the PrettyPark and Worm viruses, how to protect > your > computer and how to remove it from your computer, visit these sites: > > <A > HREF="http://www.sarc.com/avcenter/venc/data/prettypark.worm.html">Symantec > AntiVirus Research Center: PrettyPark.Worm > </A> > <A > HREF="http://www.sarc.com/avcenter/venc/data/worm.explore.zip.html">Symante > c > AntiVirus Research Center: Worm.ExploreZip > </A> > <A HREF="aol://4344:1207.ticker6.9447271.611422365">CNET News.com > Update</A> > > There are two easy steps that you can take to protect your Microsoft Word > software from the Melissa Virus and others like it. We recommend that you > print the directions provided below and use them as a step-by-step guide to > protecting your Microsoft Word software from macro viruses. > > Step 1: Add a Password to the Normal.dot File > > The Normal.dot file is the basic template that Microsoft Word opens when > you > select New from the File menu or click on the New icon. When this file is > infected with a macro virus, every document that you create with the normal > template becomes infected. To keep this template virus-free, protect it > with > a password so that only you can make changes to it. > > To Password Protect the Normal.dot File: > > 1. Start the Microsoft Word software. > 2. From the Tools menu, select Macro, then Visual Basic Editor. > 3. In the window labeled Project, click on Normal. > 4. From the Tools menu, select Normal Properties, then click on the > Protection tab. > 5. Check the Lock Project for Viewing check box and type in a password > twice. > 6. Click OK. > 7. From the File menu, select Close and Return to Microsoft Word. > 8. Exit the Microsoft Word software. The next time you start Microsoft > Word, > the normal.dot template will be protected. > > Step 2: Set the Appropriate Macro Options in Microsoft Word > > A macro is a line of commands that are created to automate some task. For > example, you can create a macro that searches and replaces words and > phrases > throughout a document as you create it. Most Microsoft Word documents don't > contain macros. Microsoft Word has preferences that you can set to alert > you > when a document that you are opening contains a macro or when the > Normal.dot > file is being changed. > > To Set Macro Options: > > 1. Start the Microsoft Word software. > 2. From the Tools menu, select Options, then the General tab. > 3. Click in the Macro Virus Protection check box. > 4. Click in the Confirm conversions at open check box. > 5. Click on the Save tab. > 6. Click in the Prompt to save Normal template check box. > 7. Click OK. > > Now, whenever you open a document containing a macro, Microsoft Word will > alert you that the document contains a macro. Never open a file that > contains > a macro unless you know what the macro is doing. > -- #### |\^/| Colin R. Leech ag414 or crleech@freenet.carleton.ca #### _|\| |/|_ Civil engineer by training, transport planner by choice. #### > < Opinions are my own. You may consider them shareware. #### >_./|\._< "If you can't return a favour, pass it on." - A.L. Brown
Technical Details
Message-ID:
<7jt0tl$d4f@freenet-news.carleton.ca>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 168df8,897448d3dd3dec7f,start X-Google-Attributes: gid168df8,public X-Google-Thread: 10aaae,897448d3dd3dec7f,start X-Google-Attributes: gid10aaae,public X-Google-Thread: 105a5a,897448d3dd3dec7f,start X-Google-Attributes: gid105a5a,public From: ag414@FreeNet.Carleton.CA (Colin R. Leech) Subject: RESOUR> Warning! PrettyPark & Worm: Two New Viruses for Microsoft Wo Date: 1999/06/12 Message-ID: <7jt0tl$d4f@freenet-news.carleton.ca> X-Deja-AN: 488710715 Organization: The National Capital FreeNet X-Given-Sender: ag414@freenet5.carleton.ca (Colin R. Leech) Reply-To: ag414@FreeNet.Carleton.CA (Colin R. Leech) Newsgroups: ott.online,can.infohighway,ncf.admin.net-abuse.discussion