
YuChakTinMichael‘sGIACGCFWProjectAssignment
Page 204
executable.Thistendstobehiddenfrom theuser,whoexpectsadocumenttobedata
thatisREAD,andnotsomecombinationofDATAandexecutablecodedesignedtobe
executed,oftenagainstthewilloftheuser,towrec khavok.”
77
Thereasonswhymacrovirusesaredangerous,asdescribedbytheWordMacroVirus
FAQ,are:
n Thesevirusestendtoinfecttheglobalmacros,whichinturnaffecttheentire
WordEnvironment.
n ThesevirusesdoREPLICATEtoanyMicrosoftWindowsenvironmentthatruns
acompatiblecopyofWord.
CounterMeasures
So,whatshouldbeimplementedinthisunderfiredGIACarchitecture totacklethese
threats?
1,
InstallAntiVirussolutionassupplementtotheemailserver.AlthoughclientlevelAV
productsaretechnicallysufficient,centralizedvirusdetectionandcleaningonthe
emailserverispreferred.
ForprotectingtheWindowsbasedemailservers,considerthefollowingAVsolutions:
eScan:
“eScanisan'enterprisewide'AntiVirussoftwarethatnotonlyscansyour
local/networkdrivesbutalsoTCP/IPTraffic*forvirusesandcleansthemona
"realtime"basisusingthe revolutionaryMicroWorldWinsockLayer(MWL)
technology.eScanisalwaysworkingunobtrusivelyinthebackground,protectingthe
computerandtheNetworkfromvirusesandwormsallthetime.”
78
MailScan:
77
http://www.bocklabs.wisc.edu/~janda/macro_faq.html#WM01
78
http://www.techarts.com/products/escan/default.asp
Kommentare zu diesen Handbüchern