Forum Home
Press F1
 
Thread ID: 69171 2006-05-24 09:18:00 Unable to read email Word doc attachment. Scouse (83) Press F1
Post ID Timestamp Content User
457308 2006-05-24 09:18:00 Hi Folks. I recently sent out a group email with a Word document attached. All but one of the group opened the doc okay. The odd one out has this on her screen....

Microsoft Visual C ++ RUNTIME LIBRARY
X Runtime Error!

Program:C/Program Files/Microsoft Office/Office 10/WINWORD.EXE
abnormal program termination
Any suggestions as to what may have caused this?
Scouse (83)
457309 2006-05-24 10:01:00 I am thinking you are running a later version of Office maybe Office 2003 and your recipients are running something older ie office 2000. Your document is accessing libraries that don't exist in there version

This type of issue more happens in Excel, however try re saving it in another format "save as" and select from "Save as type". Then resend it.
Battleneter (60)
457310 2006-05-24 10:11:00 You don't mention what Office version they run, but this MS Article may help:

You receive a "MS Visual C++ Runtime Library Runtime Error" error message when you try to close a Word document or quit Word 2002 or Word 2003 (support.microsoft.com)
Jen (38)
457311 2006-05-24 10:59:00 Yes thanks both.
Battle* - She runs 2002 and I run 2003 but we have exchanged documents before. However, I am just checking with her to see if she has made any recent changes, etc. I will send in other formats to try. This will be somewhat restricted as the doc contains graphics.
Jen - Thanks for that reference. Unfortunately it seems to suggest that the response would appear on my machine as I was completing the document, rather than, as is the case, on the recipient's machine on trying to open the doc. Will keep looking.
Scouse (83)
457312 2006-05-24 11:32:00 Using the Occams Razor principle, firstly suspect that a simple corruption in that single recipient's download has occured before looking for a more complex source.

The doc format is quite compatable from Word 6 upwards, the error message states Word 10 is in use (Word 2002) and that is confirmed by you, so it's not a document file format problem.
godfather (25)
457313 2006-05-24 11:37:00 Thanks GF. Am waiting to hear back after sending three versions to the lady. An individual resend of the doc, a rich text and, reluctantly, a plain text. It's probably a bit late to get a reply tonight but appreciate your note.
And thanks for the reminder of Ockham's Razor.... half a lifetime since anyone mentioned that to me.
Scouse (83)
457314 2006-05-24 16:04:00 Got a few friends here in the US with the same overnight problem with their WORD docs .

The fact that one of you is using Word 2003, poked up a red flag when I read your post this morning . Seems there is a new exploit in 2003, and it might be responsible for your problem right now . . . . . .



Hackers are exploiting an unpatched vulnerability in Word . That's according to security vendor McAfee, which has warned users of a new Trojan program, called BackDoor-CKB!cfaae1e6, that secretly installs software on a computer .

For the Trojan to work, however, hackers must first trick users into opening a malicious Word document . Once that has been done, though, the results can be nasty .

Unlike viruses and worms,Trojan programs do not make copies of themselves that keep spreading throughout the Internet . Hackers directly distribute the programs, which are often disguised as useful or interesting downloads .

Once installed, the malware lets hackers "execute any external commands, download additional Trojans, capture desktop screen shots, monitor and record keystrokes or passwords," McAfee said in a statement on its website .

Symantec has confirmed that hackers are circulating the malware via malicious Word document email attachments . But at present its use is "limited to attacks against select targets," Symantec said .

The attack originated in Asia and targets "specific large organisations," Symantec said, adding that it has seen similar targeted attacks in the past which also took advantage of flaws in Microsoft Office applications .

The attackers behind the Trojan may be operating from China or Taiwan, according to Johannes Ullrich, chief technical officer of the SANS Internet Storm Center . Servers associated with the attack have been traced back to those countries, and researchers have found Chinese characters in the malicious Word document, Ullrich said .

One company - an unnamed government contractor that reported details of its attack to SANS - said that the malicious email had been sent to only one person in its organisation, and had been written to resemble a normal inter-office message, Ullrich said .

"The exploit was quite sophisticated," he said . "None of the anti-virus systems that they used caught it . "

Ullrich said he did not know what the attackers' ultimate goal may be, but they can snoop on data or install unauthorised software once the Trojan gets installed . "It opened up a remote connection to a web site in China that would have allowed it to remotely control [the infected computer]," he said .

SANS has published a number of tips on how to avoid this type of attack . The security training organisation recommends that companies limit users' privileges and monitor outbound traffic . It also suggests that companies think about quarantining all attachments for six to 12 hours in order to give the anti-virus vendors time to catch up with new threats .

Because users must download the malicious software in order to become infected, McAfee rates the risk of the Trojan as "low . "

The vulnerability affects Microsoft Word XP and Word 2003, but does not work on computers that use the Word Viewer to view documents, according to Microsoft . Word Viewer is software that lets users read Word documents without installing the Word software .

Microsoft is testing a fix for the Word vulnerability and said it expects to release this as part of its next round of monthly security patches, which are scheduled to be released on 13 June .

You two might just be peripheral and collateral damage from this trojan
SurferJoe46 (51)
1