Conference minotr::security_advisory

127.0. "CISG Security Bulletin 1997-01, Excel/Laroux Virus" by MINOTR::NOBLE (Your Data, Your Job...Protect Both) Tue Feb 25 1997 13:20

         DIGITAL INTERNAL USE ONLY
***************************************************************
*        CORPORATE SECURITY
*        CORPORATE INFORMATION SECURITY GROUP
*        Feb 24, 1997
*        SECURITY BULLETIN #1997-01
*
***************************************************************
[DO NOT DELETE THIS BANNER]

This security bulletin is directed to the DIGITAL workforce
worldwide for immediate attention.  Cost Center managers are
responsible for ensuring appropriate forwarding to contracted
personnel.

Thanks to the Virus Core Team for authoring this bulletin.


SUBJECT:	Excel/Laroux Virus Protection

The Excel/Laroux virus has hit DIGITAL with full force and is
continuing to spread both internally and across the Internet.

IMPACT: 

The Excel/Laroux virus is not destructive at this time, but
does have business impact.  Due to the benign nature of the
virus, it has been able to infect a large number of computer
systems within DIGITAL.  

Excel/Laroux has caused disruption due to confusion and
the complexity of corrective actions.

WHO IS AFFECTED: 

Clients using Microsoft Excel on Windows 3.1x, Windows 95, and
Windows NT systems are affected.

SOLUTION: 

There are a variety of techniques for fighting Excel/Laroux.
However, not all are 100% effective in all of our environments
within DIGITAL world-wide.

The recommended instructions for detecting and disinfecting the
Excel/Laroux virus are available at 

http://ccs-security.wro.dec.com/av/laroux.htm.  

  (This page will be periodically updated to reflect the
  rapidly changing situation.)

For more information on virus related matters, see also:

http://www-is-security.mso.dec.com/is-sec/pc-sec/anti-menu.html

CONTACT:

For further assistance on Excel/Laroux specifically, or if you
are not able to access the WEB sites identified above, please
call your local Help Desk.
	

NOTE:

	CISG Security Bulletins provide information about 
electronic information security threats and/or issues that
may not require a specific action or response.  A Security
Bulletin is used to communicate a moderate risk which is not
as time sensitive as a CISG Security Advisory.
	The only authorized source of computer/network security
advisories and bulletins for DIGITAL is the Corporate
Information Security Group.  Please advise your system
managers and users of DIGITAL's computers and networks that
any security warnings, alerts, advisories, and bulletins,
especially those requiring responsive action on their part,
are the explicit responsibility of the Corporate Information 
Security Group.
	If an internal or external advisory or bulletin is 
received from other sources and no information on the topic has
been received from CISG, please contact our group at 
DTN 223-8900.  This allows a single focus for all security 
advisory or bulletin information for our Company.
	All security advisories and bulletins can be found via
the Security Advisory Notefile MINOTR::SECURITY_ADVISORY
(http://www-notes.lkg.dec.com/minotr/security_advisory) or 
VTX SECURITY.


DIGITAL INTERNAL USE ONLY