Stardust virus lands on OpenOffice

Researchers at Kaspersky Lab have spotted what they believe is the first
virus for OpenOffice, the open-source rival to Microsoft's Office
productivity suite. The virus, dubbed Stardust, is capable of infecting
OpenOffice and StarOffice, which is sold by Sun Microsystems, a Kaspersky
Lab researcher wrote on the Russian company's Viruslist Web site on Tuesday.


"Stardust is a macro virus written for StarOffice, the first one I've seen,"
the researcher wrote. "Macro viruses usually infect MS Office applications."


The pest is written in Star Basic. It downloads an image file with adult
content from the Internet and opens that file in a new document, according
to Kaspersky's posting. 

So far, Stardust is a proof-of-concept virus, which means that it was
created to demonstrate that an OpenOffice virus is possible. The virus has
not been sent out in the wild and is not actually attacking people's
systems. 

Read About It
Information about StarOffice/StarDust.intd is located on VIL at:
http://vil.mcafeesecurity.com/vil/content/v_139638.htm

Detection
StarOffice/StarDust.intd was first discovered on June 1, 2006 and detection
will be added to the 4775 dat files (Release Date: June 1, 2006).

Though we consider this a low threat, An EXTRA.DAT file may be downloaded
via the McAfee AVERT Extra.dat Request Page:
<https://www.webimmune.net/extra/getextra.aspx>

If you suspect you have StarOffice/StarDust.intd, please submit a sample to
<http://www.webimmune.net>

Mike Grant
Bytware, Inc.
775-851-2900 

http://www.bytware.com


CONFIDENTIALITY NOTICE:  This e-mail message and any attachment to this e-mail 
message contain information that may be privileged and confidential.  This 
e-mail and any attachments are intended solely for the use of the individual or 
entity named above (the recipient) and may not be forwarded to or shared with 
any third party.  If you are not the intended recipient and have received this 
e-mail in error, please notify us by return e-mail or by telephone at 
775-851-2900 and delete this message.  This notice is automatically appended to 
each e-mail message leaving Bytware, Inc.