OT: New Word worm at work

3 views
Skip to first unread message

John Jacques

unread,
Nov 30, 2006, 8:36:54 PM11/30/06
to MB...@googlegroups.com
Hello, not released yet in AV updates or information on it. Nothing
could be
found. Today a user sent a file to his workstation from home. It was a
Word
.doc file and he had a problem with it printing blank pages and allot
of
them. He kept canceling the print job. Print Preview would not work,
only
showed blank pages. Word said there were 5 pages total on the screen
for the
document, but there were actually only 3.

Symantec AV 11 current was running and nothing found at the time or
even
afterwards. The document change the default print driver to 600 pages
and
shifted the printed material about 1.5" to the right, so that it would
print
off the right hand side of the page (when it did print one page in the
middle of the blank ones).

The next person tried to open and print the file on their workstation,
same
thing.

About 4 hours later everyone who opened ANY Word file had the same
problem,
but it only effected PCL drivers, and it corrupted the actual driver
files,
even the Windows test page would print off the edge of the page, but
only 1
time.

After infection, Word would print 600 pages to the default printer, but
only
if the default printer was using a PCL driver file.

The drivers had to be removed from the workstation (not just removing
the
printer) and reinstalled AFTER A REBOOT to get rid of the bad drivers.

Just an FYI - seeing how the US is supposedly being attacked by
terrorist
starting midnight tonight with the Internet.

John



____________________________________________________________________________________
Do you Yahoo!?
Everyone is raving about the all-new Yahoo! Mail beta.
http://new.mail.yahoo.com

Reply all
Reply to author
Forward
0 new messages