Swimming in the Pensieve

From: http://www.viruslist.com/en/weblog?weblogid=187738337
“Analyst’s Diary

Stardust - a macro curiosity

Kostya
May 30, 2006 | 11:44 GMT

I came across something interesting today: a macro virus which we’ve named Virus.StarOffice.Stardust.a

You might wonder what’s interesting about this - viruses have been around for a long time, and are starting to fade from the scene.

But if you look more closely at the name, you can see why I’m interested: Stardust is a macro virus written for StarOffice, the first one I’ve seen. Macro viruses usually infect MS Office applications.

Stardust is the first virus I know of which is theoretically capable of infecting StarOffice and/or OpenOffice. It’s written in Star Basic. It downloads an image file (with adult content) from the Internet and then opens this file in a new document.

We’ll have a description of it in the Virus Encyclopaedia soon.”

Infects StarOffice/OpenOffice.org with what…X-Rated images?

Lord have mercy upon us! We simply can’t close that new document!

BTW: I just checked my Macro Security settings in StarOffice:

Very high.
Only macros from trusted file locations are allowed to run.
All other macros, regardless if signed or not, are disabled.

Just the way I originally set them.Then again, on a Linux-based system, there isn’t much in the way of damage that a StarOffice macro is going to do to my filesystem or kernel processes.

Once again, it must be a slow revenue time of year for the AV vendors; so they’re making mountains out of molehills.