@Macarlo, Inc.
@Macarlo's Shareware & Web
OS/2
Java Lobby Member
Java Site Accredited

SPECIAL NOTICE

March 20, 1999

@Macarlo, Inc. has identified today March 20, 1999 a new virus that destroys HTML code in seconds. The virus - named here <Tag Replicator> replicates all tags, create tables and inserts objects linkeds on HTML document. In seconds an HTML page with 15KB can be increased to 70KB

We was bombed by this new virus on Windows NT HDD formated in FAT. At the moment we are analyzing the code of this virus and we have not a secure method to kill it.

We discovered that <Tag Replicator> penetrates the partition trough the browser, as a cookie or in HTML document saved for copy.

We used Microsoft Explorer as itself and as Neoplanet, Netscape Communicator, StarBrowser, Hot Java Browser and Opera here. The virus has infected our IDE when we authorizated StarBrowser to accept all cookies.

We tested this trap on Unix (formated Ext2) and on OS/2 (formated HPFS). <Tag Replicator> can't replicates on Ext2 or HPFS, we noticed.

Yesterday this virus infected here and bombed in few seconds an giant HTML document from an intranet. The virus replicates the tag <A HREF="nameurl"...>46 times per page and dozens pages has been damned in seconds. Using an programmer's editor for 32 bits, TSE32 Pro, from SemWare, we eliminated quickly the replicated blocks (we identificated the blocks using an HTML .syn file for syntax highlightning).

But we can't destroy the virus at this time. Finally, we have forced to format the entire HDD using <format /mbr> to kill the virus.

We inform that Viruscan was detected the virus but can't isolates it. Also the BIOS have detected the virus.

@Macarlo, Inc.
@Macarlo's Shareware & Web
OS/2
Java Lobby Member
Java Site Accredited

[TOP] [HOME] [INDEX]