SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Pastimes : Computer Learning -- Ignore unavailable to you. Want to Upgrade?


To: John Freeman who wrote (18405)4/6/2001 3:59:27 PM
From: mr.mark  Respond to of 110652
 
john

"There was something in the news about turning off macros, or somethigf to that effect last fall, had something to do with viruses/worms, does anyone remember this?"

this page....
symantec.com

contains some interesting notes on macros

*********************************
"Symantec avoids all of this by creating a virtual anti–virus lab in each computer that is running Norton AntiVirus. When Norton AntiVirus is installed Bloodhound by default is turned on. When a file is accessed, or scanned Bloodhound opens a virtual environment to host the file. It then runs the file over and over, all the while recording what the file is asking for and what it does.

If the file accessed is an MS Word document, for example, it first checks to see if there are any macros attached to the document. If not the file is ignored by Bloodhound it loads a usual. If the files do contain macros it is placed in a "virtual" Word environment. Bloodhound then executes the macro over and over again. If the macro asks for another document or macro, Bloodhound supplies it with a virtual one and records what happens to the document or macro. If the macro asks for the time or date, Bloodhound supplies known trigger dates and times. The Bloodhound records all the actions of the macro.

After the file or macro is completely tested by Bloodhound a complete picture of the true behaviour of the file or macro is revealed. Chances are very good that if the file is infected Bloodhound will be able to fix it as it has recorded the actions of the file or macro."
*********************************

fwiw

:)

mark