|
Free Resources from FMS |
|
|
|
|
"Thank you! Thank you! I just finished reading this document, which was part of a link in the recent Buzz newsletter. I have printed it for others to read, especially those skeptical on the powers of Access and its capabilities." - Darren D. |
|
|
|
|
Microsoft
Access Resource Center
 |
 |
Scan Your Databases for Viruses
Until March of 1998, Microsoft Access has been free of the type of macro viruses that are well known in the Word and Excel worlds. On March 8, 1998, this changed when the first macro virus for Access, known as JETDB_ACCESS 1 (also known as "AccessIV") was uncovered by TrendMicro Inc, a leading virus detection company (www.trendmicro.com). While this virus doesn't cause any known damage, it does propagate itself to other databases.
As a service to the Access developer community, FMS has developed the FMS Access Virus Scanner. This simple utility scans all selected Access/Jet databases for the virus, and also detects other possible risk issues. The output of this utility is a report that identifies all known issues. Note that this program does not remove viruses from databases--it can only detect the virus. However, the program documentation includes complete information on removing the virus.
You can download this utility free of charge from our web site. Please read the license agreement for important information.
Description of the Virus
The virus is distributed in the form of a Microsoft Access 97 database. The database is like any other database--it is not corrupt, or some other file disguised as an MDB. It is merely a database with an Autoexec macro and a single module containing 100% legal VBA code.
Two databases have been documented as the original carrier of this: accessiv.mdb and acesiv_b.mdb. The only difference appears to be that the second one has its objects marked as "hidden" The author of this virus has marked the macro and module in the acesiv_b.mdb version as "hidden" using the standard Access user-interface method. This makes it harder to detect the virus at first glance, but this protection is easily circumvented.
In order to get the virus onto your namespace (your local or network drives), you must obtain and open one of the original two databases mentioned above, or database infected by one these databases. The virus cannot spread by any other means--it relies on you to open its "carrier" database in Access 97 and allow its Autoexec to run.
Since the database is in Access 97/Jet 3.5 format, its original form cannot be opened using earlier versions of Access (95, 2.0, 1.1 or 1.0). However, it can infect Access 95 databases. Infection of Access 2.0 databases is theoretically possible, but since Access 2.0 doesn't support VBA, the code won't run, effectively preventing the Access 2.0 database from becoming an active virus carrier.
Download the FMS Access Virus Scanner
The FMS Access Virus Scanner is an Access 97 (version 8) database. You must have Access 97 installed to use the program. To download and install the FMS Access Virus Scanner program, follow these steps:
- Download the Setup Program to a temporary directory on your system.
- When the download is complete, run the FMSAVS10.EXE program from your temporary directory.
- Follow the on screen prompts to install the software.
- The software and documentation is now available from your Start menu under Programs, FMS, Access Virus Scanner.
- Read the Online Users Guide for further information.
BEFORE USING FMS ACCESS VIRUS SCANNER (SOFTWARE), YOU MUST AGREE TO THE TERMS OF THE FOLLOWING LICENSE AGREEMENT.
THE SOFTWARE AND ITS ACCOMPANYING DOCUMENTATION ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. FMS INC. DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF INTELLECTUAL PROPERTY. IN NO EVENT SHALL FMS INC. OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, OR OTHER PECUNIARY LOSS) ARISING OUT OF THE USE OF OR INABILITY TO USE THE SOFTWARE, EVEN IF FMS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. BECAUSE SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, THE ABOVE LIMITATION MAY NOT APPLY TO YOU.
THIS SOFTWARE MAY NOT BE DISTRIBUTED IN ANY FORM WITHOUT THE EXPRESS WRITTEN PERMISSION OF FMS. AS OF THE WRITING OF THIS DOCUMENT, THE SOFTWARE IS AVAILABLE FROM THE FMS WEB SITE AT NO CHARGE. THIS MAY BE SUBJECT TO CHANGE. DO NOT DISTRIBUTE THIS SOFTWARE TO OTHERS--THEY SHOULD VISIT THE FMS WEB SITE TO DOWNLOAD A COPY.
THE SOFTWARE IS PROVIDED WITH RESTRICTED RIGHTS. USE, DUPLICATION, OR DISCLOSURE BY THE GOVERNMENT IS SUBJECT TO RESTRICTIONS AS SET FORTH IN SUBPARAGRAPH (C)(1)(II) OF THE RIGHTS IN TECHNICAL DATA AND COMPUTER SOFTWARE CLAUSE AT DFARS 252.227-7013 OR SUBPARAGRAPHS (C)(1) AND (2) OF THE COMMERCIAL COMPUTER SOFTWARE -- RESTRICTED RIGHTS AT 48 CFR 52.227-19, AS APPLICABLE. MANUFACTURER IS FMS, INC. 8150 LEESBURG PIKE, SUITE 600 VIENNA, VA 22182 U.S.A. PHONE 703/356-4700 FAX: 703/448-3861 EMAIL: INFO@FMSINC.COM HTTP://WWW.FMSINC.COM
