THE WELCH COMPANY
440 Davis Court #1602
San Francisco, CA 94111-2496
415 781 5700


S U M M A R Y


DIARY: April 24, 1999 07:06 AM Saturday; Rod Welch

Installed Norton virus protection program, v 5.0, on CPU11.

1...Summary/Objective
2...Norton Web Services
3...Will now try to scan for viruses.
4...Found a virus...


..............
Click here to comment!

CONTACTS 
0201 - Intel Corporation                    408 765 8080
020101 - Mr. Morris E. Jones; Director of Architecture =408 545 9521
0202 - Symantec Norton Virus Protection     541 984 7879
020201 - Santa Monica, Ca
020202 - Mr. David NLN
020203 - Technical Support

SUBJECTS
Anti-virus, Norton
Information Organization & Maintenance
Virus Protection
Virus Wm.TempleA Found and Repaired

0806 -    ..
0807 - Summary/Objective
0808 -
080801 - Follow up ref SDS 11 0000, ref SDS 10 0000.
080802 -
080803 - Installed Norton virus protection, ran it and found a virus on the
080804 - Word template file.
080805 -
080806 - Since we do not use Word, it does not seem to have caused any damage
080807 - because only one file was infected.
080808 -
080809 -     [On 990430 Chernoyble virus reported. ref SDS 12 4620]
080810 -
080811 -     [On 990727 Office 2000 presents increases risks from virus
080812 -     problems. ref SDS 13 9788]
080813 -
080814 -
0809 -
0810 -
0811 - Progress
0812 -
081201 - Did not hear back from Morris on questions. ref SDS 11 8456
081202 -
081203 - There is no record we actually installed Norton previously.  Looks
081204 - like we used it from floppy disks.
081205 -
081206 - Wonder if we can do this with Norton.
081207 -
081208 - Actually, we need to be upgrading Norton regularly, so it is better to
081209 - have it online.
081210 -
081211 - Put it in...
081212 -
081213 -                       h: 00 16
081214 -
081215 - Installation indicated the program files are dated 981021.
081216 -
081217 - After installation, ran "Live Update"
081218 -
081219 - This downloaded about 1.1M and updated the program as of 990419.
081220 -
081221 - Installation put a bunch of stuff in...
081222 -
081223 -      I:\Program Files\Common Files\Symantec Shared\VirusDefs
081224 -
081225 -            19981021.001
081226 -            19990419.001
081227 -            binhub
081228 -            incoming
081229 -            texthub
081230 -            definfo.dat
081231 -            usage.dat
081232 -
081233 - The phone number for Norton and/or Symantic is...
081234 -
081235 -                      541 984 7879
081236 -
081237 - There is a web site at...
081238 -
081239 -                   http://service.symantic.com
081240 -
081241 - Web site for Symantic Antivirus Research Center, SARC...
081242 -
081243 -                   http://www/symantic.com/avcenter
081244 -
081245 - Norton Web Services
081246 -
081247 - This is a service that costs $29.95 per year which updates programs on
081248 - the computer using the Internet.
081249 -
081250 - The following coupon number gives 6 months support for $6.96
081251 -
081252 -                       b4c4-ab3-7646042
081253 -
081254 -
081255 -
081256 -
081257 - Will now try to scan for viruses.
081258 - Found a virus...
081259 -
081260 -                         wm.temple.a
081261 -
081262 - ...in following file...
081263 -
081264 -                  i: 00 02 06 templates normal.dot
081265 -
081266 -     This appears to be a Word file, or used for Word, since it has a
081267 -     Word symbol for the file icon.
081268 -
081269 -     I called Morris and he said this is the screen we see when Word
081270 -     is opened to create a new document.
081271 -
081272 -     Norton's Virus List describes this virus...
081273 -
081274 -        This do-nothing macro virus spreads on opening and saving MS
081275 -        Word Documents. Some variants have corrupted macros that make
081276 -        MS Word display "Word Basic Err" or "Out of Memory" error
081277 -        message
081278 -
081279 -     So, it seems to be relatively harmless.
081280 -
081281 -     Since we do not use Word very much, this may account for the
081282 -     thing not having spread very far.
081283 -
081284 -
081285 -
081286 -  ..
0813 -
0814 -
0815 - 0849 called Morris
0816 -
081601 - He said Intel has been infected by Melissa.  They are "scrubbing" all
081602 - the files this weekend.
081603 -
081604 - This may have been the source of the Milissa letter I received
081605 - yesterday. ref SDS 11 4466
081606 -
081607 -     [On 990727 Office 2000 presents increases risks from virus
081608 -     problems. ref SDS 13 9788]
081609 -
081610 -
081611 -
081612 -
081613 -
081614 -
081615 -
081616 -
081617 -
081618 -
081619 -
Distribution. . . . See "CONTACTS"