ISLANDIA, N.Y., Jan. 2 /PRNewswire/ -- Computer Associates International,
Inc. (NYSE: CA) (CA) today warned computer users of a new Word macro virus
called "Armagidon." CA provides detection for the virus, which infects Word
documents.
"Armagidon" spreads through traditional means such as emails, shared
drives, and floppy disks. Infected documents contain two macros:
"Document_Open" and "Document_New", which are stored in the class module
"ThisDocument." Infected templates contain an additional macro module
containing eleven macros: Auto_Exec, Auto_Exit, ToolsOptions, ToolsMacro,
FileTemplates, ViewVBCode, Organizer, ToolsRecordMacroStart,
ToolsRecordMacroToggle, FileSave, and FilePrint.
When an infected document is opened, the code from the "Document_Open"
macro is executed, enabling "Armagidon" to infect the normal template. The
virus uses a temporary file called "armagidon.bas" to create the macro module
"Armagidon." On May 8th, Red Cross Day, the virus replaces the Windows mouse
pointer with the Red Cross symbol.
Upon execution of the "FilePrint" function, a more dangerous payload is
triggered, which replaces one non-standard ASCII character with another.
"As IT professionals around the world focus on their technology
environments, CA will continue to notify our clients of new viruses as we
detect them," said Simon Perry, CA's Security Business Manager. "We have
received very positive feedback concerning this proactive approach and will
continue to provide an unparalleled level of notification to help protect our
clients' environments."
Protection from the latest viruses and worms can be downloaded free from
Computer Associates at http://antivirus.cai.com .
For the latest information about "Armagidon" and other viruses, visit
http://www.cai.com/virusinfo .
Computer Associates International, Inc., the world leader in mission-
critical business computing, provides software, support and integration
services in more than 100 countries around the world. CA has more than 17,500
employees and had revenue of $5.3 billion in fiscal year 1999.
For more information about CA, please call 631-342-5224 or e-mail
info@cai.com. CA's World Wide Web address is http://www.cai.com .
All referenced product names are trademarks of their respective companies.
SOURCE Computer Associates International, Inc.
 back to top
Related links:
http://www.cai.com
http://antivirus.cai.com http://www.cai.com/virusinfo
Company News On-Call:
http://www.prnewswire.com/comp/196575.html or fax,
800-758-5804, ext. 196575
CONTACT:
Computer Associates Y2K Hotline, 631-342-4980
|
