Macro Viruses By Justin Reschke COT 4810 Overview

Macro Viruses By Justin Reschke COT 4810

Overview l l l Macro Virus General Info Famous Macro Viruses Methods of Detection and Removal Conclusion References

What Are Macros? l l A simple script type program written in an application’s macro language Used for automated processes in a document

What are Macro Viruses? l l l Most prevalent type of virus in late 1990 s and early 2000 s Infect a document or template rather than executable code Can infect at different points during a file’s use

Macro Language Requirements for Creating Macro Viruses l l l Macro programs must link to or reside in a particular file Macro programs can be copied from file to another Macro programs must be able to gain control without user intervention

Why are they so dangerous? l l Can infect multiple types of operating systems People don’t normally think of viruses in documents Easy to learn how to write a macro virus Because office programs are usually integrated, email programs can be used to further spread the virus

Famous Macro Viruses l l l Concept - Distributed by Microsoft Considered to be the first macro virus Simply showed the potential for macro viruses

Famous Macro Viruses l l Melissa Virus – Word 97 Virus Spread via Outlook Overwrites first macro in open documents and in the normal. dot template Turns off macro detection

Famous Macro Viruses l l l ILOVEYOU – Uses word macro to send itself in outlook Deletes various mp 3, mp 2, and jpg files Also sends usernames and passwords to the virus’s author

Common Programs Used By Macro Viruses l l l Access Excel Power. Point Word Ami. Pro

Detection and Removal l Anti-Virus Tools – l Integrity Checkers – l Scanners, Monitors Cyclic Redundancy Check (CRC) Behavior Blockers

Summary l l Macro languages are good if in the right hands Although they aren’t so dangerous anymore, its important to note macro viruses Securing your system is important Don’t download unknown email attachments

References l l Writing Word Macro Viruses by R. Rattus, http: //melissavirus. com, Melissa. Virus. com http: //www. infoplease. com/ipa/A 0872842. htm l, Computer Virus Timeline http: //www. itsecurity. com/papers/kaspersky. h tm, Macro-Viruses: Genesis, Truth About the Threat and Methods of Protection