[Esd-l] Re: Trapped poisoned Microsoft attachments

Henry Kwan sanitizer at designmedia.com
Tue Feb 18 13:07:42 PST 2003


> Macros inside Office documents make up the score.  You can set the Max 
> score to allow, it tells you how in John's Docs.
> 
> If I were getting scores over 70 I would want to see what people are 
> putting in their macros and make sure it isn't going to create or delete 
or 
> modify any files.  AFAIK, auto-start macros give a good high score.  
Check 
> out the documents with these scores, it may not be something that shows 
up 
> on your virus scanner, yet.

Ooops.  Thanks for the tip.  I'll go take a look at the docs now.

I know that using Office documents to exchange information isn't exactly 
ideal but people like to do it and I'm certainly not in a position to 
change that practice.  :(

Thanks again for the info.



More information about the esd-l mailing list