How can a virus be in a .DOC file?

J

justme

How can a virus be in a .DOC file?

I thought that .DOC files were only document (text) files with codes
to maintain formatting, text, colors, etc. How can a virus be in one
of them? They are not executable?

Thanks
 
P

Pepperoni

How can a virus be in a .DOC file?

I thought that .DOC files were only document (text) files with codes
to maintain formatting, text, colors, etc. How can a virus be in one
of them? They are not executable?

Thanks

They are a notepad file, made executable by
the embedding of benign or malicious script using Object Linking and
Embedding (OLE).
http://www.pc-help.org/security/scrap.htm
http://www.computeruser.com/newstoday/99/11/01/news2.html
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q138275
http://www.computeruser.com/news/00/06/20/news4.html
 
K

kurt wismer

How can a virus be in a .DOC file?

I thought that .DOC files were only document (text) files with codes
to maintain formatting, text, colors, etc. How can a virus be in one
of them? They are not executable?

..doc files are not pure data files... .doc is the extension used for ms
word documents and are thus OLE2 objects - they are, in effect, their
own file system (and have file system troubles like fragmentation) and
can contain interpreted programs called macros... and those macros can
be infectious...

viruses in .doc files are generally macro viruses... google should be
able to tell you just able all you'd ever wanted to know (and plenty
you didn't) about macro viruses...
 
K

kurt wismer

Pepperoni said:
They are a notepad file, made executable by
the embedding of benign or malicious script using Object Linking and
Embedding (OLE).

notepad??? *.doc files aren't ms word document files? since when?
 
P

Pepperoni

kurt wismer said:
notepad??? *.doc files aren't ms word document files? since when?

OK,OK.....

I copied the entry from another post. Same-same problems can be embedded in
a simple notepad file, also.

file extensions may also be either misleading or hidden
 
F

Fan

How can a virus be in a .DOC file?

I thought that .DOC files were only document (text) files with codes
to maintain formatting, text, colors, etc. How can a virus be in one
of them? They are not executable?

Thanks

..DOC files are most often from Microsoft Word. Because of the way that
Microsoft wrote Word, a person can put something called a "macro" into
the document. A macro is a relatively small computer program, in a
sense.

Within the macro are instructions for Word to follow, just like in any
other program. They can go way beyond just setting fonts, margins,
indent, etc. The problem is that some of those instructions are
powerful enough to cause problems with your computer. It is possible
to write a macro that does virus-like things.

The same thing applies to some other Microsoft programs, like the
Excel spreadsheet. There are also other small programs that Windows
uses that can be used to deliver a virus-like problem. The current
wave of "e-mail viruses" are an example of that.

I have received four viruses in the past month via e-mail. My
anti-virus program, Norton, caught them all before they did any
damage. If you don't have an up-to-date anti-virus package, you could
be the victum of one of these without your knowledge.

The reason that I received these is that a friend insists on sending
all e-mailed jokes, stories, etc. in an inappropriate way. He puts the
names of all the people on his e-mail list into the TO: field. That
way, everyone has the e-mail of everyone else. Some of those people
then forward the joke to others, using the same technique. This
snowballs so that one e-mail can have dozens of e-mail addresses in
it.

If ANY one of the machines that received the e-mail becomes infected
with an e-mail virus, the virus sends itself to EVERY e-mail address
in the machine. This is NOT just the addresses that the infected
machine has sent to or received from. It includes every address that
is embedded in every e-mail that is in the machine. It spreads like
the flu when a person sneezes in a crowded elevator.

There are also a fairly high number of viruses (actually trojans, but
still dangerous) posted in newsgroups. These are usually with subjects
like "xxxx topless" or "xxxx nude" where xxxx is the name of a well
know person. Most of these are 2-300 lines long.

Since you cannot have a decent picture in under a thousand lines (in
my personal opinion), these are easy to spot. They are also usually in
groups where such pictures are off-topic. That is another tip off.
 
S

Steven Stern

How can a virus be in a .DOC file?

I thought that .DOC files were only document (text) files with codes
to maintain formatting, text, colors, etc. How can a virus be in one
of them? They are not executable?

Thanks

..doc files may contain macros that, when opened by Word, have full access to
your system, so .doc files should be regarded as executables.

Steve Stern
Manager, WUGNET VirusCentral Forum
http://go.compuserve.com/viruscentral?access=public
 
P

Pepperoni

On Wed, 04 Feb 2004 01:51:02 -0600, (e-mail address removed) wrote:
xxxxxxxsnipxxxxxxxx

The reason that I received these is that a friend insists on sending
all e-mailed jokes, stories, etc. in an inappropriate way. He puts the
names of all the people on his e-mail list into the TO: field. That
way, everyone has the e-mail of everyone else. Some of those people
then forward the joke to others, using the same technique. This
snowballs so that one e-mail can have dozens of e-mail addresses in
it.

If ANY one of the machines that received the e-mail becomes infected
with an e-mail virus, the virus sends itself to EVERY e-mail address
in the machine. This is NOT just the addresses that the infected
machine has sent to or received from. It includes every address that
is embedded in every e-mail that is in the machine. It spreads like
the flu when a person sneezes in a crowded elevator.

EXACTLY!!!! My friends become irate when I ask not to be on their
multi-recipient mailings. I explain repeatedly that my addy becomes quite
vulnerable when they do these mailings. (especially when the jokes are rib
splitters) I become a target of everyone on the list, everyone THEY forward
it too.... spam addy collectors......anyone

They never seem to *get* the idea.

If you MUST mail to multiple persons, put them on the BCC line (blind
carbon copy)

"Email - The bcc: function hides the addresses of the recipients from
everyone listed in the To: and cc: lists. This is the perfect way to send
emails to multiple people on a mailing list, since the blind copied person
will see only their own name and address in the header and their email
address will be hidden from other recipients. "
http://www.geocities.com/besisters/email/bcc.html#bcc

Pepperoni
 
J

Jan Il

Pepperoni said:
EXACTLY!!!! My friends become irate when I ask not to be on their
multi-recipient mailings. I explain repeatedly that my addy becomes quite
vulnerable when they do these mailings. (especially when the jokes are rib
splitters) I become a target of everyone on the list, everyone THEY forward
it too.... spam addy collectors......anyone

They never seem to *get* the idea.

If you MUST mail to multiple persons, put them on the BCC line (blind
carbon copy)

"Email - The bcc: function hides the addresses of the recipients from
everyone listed in the To: and cc: lists. This is the perfect way to send
emails to multiple people on a mailing list, since the blind copied person
will see only their own name and address in the header and their email
address will be hidden from other recipients. "
http://www.geocities.com/besisters/email/bcc.html#bcc

Pepperoni

Excellent Pepperoni! ;-))) I'll pass this on to those who like to put me on
their Fw:Fw:Fw:Fw:Fw: (etc) lists of things that tickle *their* funny bone.
I do so dislike those multi-Fw mails. I won't even open a Fw unless I expect
it, I just delete them. If they have something that they think will really
interest me, then can send it just to me, not along with 120 other people I
don't know. At least with the bcc it would lesson exposure.

Thank you very much for sharing this very interesting and helpful
information. I for one appreciate it very much.

Jan :)
 
P

Pepperoni

Jan Il said:
Excellent Pepperoni! ;-))) I'll pass this on to those who like to put me on
their Fw:Fw:Fw:Fw:Fw: (etc) lists of things that tickle *their* funny bone.
I do so dislike those multi-Fw mails. I won't even open a Fw unless I expect
it, I just delete them. If they have something that they think will really
interest me, then can send it just to me, not along with 120 other people I
don't know. At least with the bcc it would lesson exposure.

Thank you very much for sharing this very interesting and helpful
information. I for one appreciate it very much.

Jan :)

Another plus: The recipient thinks you took the time to make a mailing
*just to THEM*. You'll get many more responses to your mailing, and people
like myself won't complain about the re:re:re: garbage.
http://www.geocities.com/besisters/email/email.html
There are more good e-mail etiquette hints on the link above.
 
J

Jan Il

Pepperoni said:
me people

Another plus: The recipient thinks you took the time to make a mailing
*just to THEM*. You'll get many more responses to your mailing, and people
like myself won't complain about the re:re:re: garbage.
http://www.geocities.com/besisters/email/email.html
There are more good e-mail etiquette hints on the link above.

Thank you for the additional information. I have a couple of friends who
roam the net for jokes, sayings and such, put them into a collection, send
them out to everyone they know, and tell those people to forward them to
their friends. Lord only knows where they get these things, and what they
have on their PC's. I have all messages with Fw in it put into a separate
folder, fumigate it, then check to see who they are from. Any with more than
1 Fw in it is deleted outright. I use the bcc at work a lot, mostly for my
boss, so he knows who I am sending information to, and what my end of the
conversation was when I don't want the other party to know I have my boss
watching my back. ;-) I hadn't thought of it in this context though, so it
is really good information to put into practice at home too.

Jan :)
 
F

Frans Meijer

kurt said:
notepad??? *.doc files aren't ms word document files? since when?

I think .doc extensions were also used before MS Word existed. They'd contain
documentation, usually in plain ascii text and were frequently formatted in a
manner suitable for text-printers.
 
K

kurt wismer

Frans said:
I think .doc extensions were also used before MS Word existed. They'd
contain documentation, usually in plain ascii text and were frequently
formatted in a manner suitable for text-printers.

yes, of course, you can use .doc on anything you like, really... but
these days .doc files are almost exclusively ms word documents...
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top