Microsoft KB Archive/323302

= PRB: Inert Virus Found in Korean Language Version of Visual Studio .NET =

Article ID: 323302

Article Last Modified on 5/26/2005

-

APPLIES TO


 * Microsoft Visual Studio .NET 2002 Professional Edition
 * Microsoft Visual Studio .NET 2002 Enterprise Architect
 * Microsoft Visual Studio .NET 2002 Enterprise Developer
 * Microsoft Visual Studio .NET 2002 Academic Edition
 * Microsoft Visual Basic .NET 2002 Standard Edition
 * Microsoft Visual C# .NET 2002 Standard Edition
 * Microsoft Visual C++ .NET 2002 Standard Edition

-



This article was previously published under Q323302



NOTE: The information in this article applies to the Korean version%3 of Microsoft Visual Studio .NET (2002) only.



SYMPTOMS
An inert Nimda virus has been detected in one of the Help files that is included in the Korean language version of Microsoft Application Center Test (ACT). Installing or using the Korean version of Microsoft Visual Studio .NET does not cause an infection. The risk of infection is extremely low.

The ACT Help files are a component of the Korean language versions of the Visual Studio .NET developer tool, which includes the following editions:


 * Visual Studio .NET Professional
 * Visual Studio .NET Enterprise Architect
 * Visual Studio .NET Enterprise Developer

The ACT Help files are also a component of Standard editions of all Microsoft developer tools, including Visual Basic .NET, Visual C++ .NET, and Visual C# .NET.

In all analyzed scenarios, Microsoft considers the chance of activating the virus to be extremely low. Detailed information about the exact location and the required steps to activate this virus are not being disclosed to protect customers from the potential actions of any malicious parties.

Customers should be advised that the virus that is contained in the file cannot be activated through standard or heavy use of Application Center Test or Visual Studio .NET. Additionally, the virus that is contained in the file cannot be distributed when you deploy projects.



RESOLUTION
Microsoft has released an update that removes the infected files from an existing installation of Visual Studio .NET. Microsoft strongly recommends that you apply the update immediately.

For the English-language instructions about how to download and install the Korean version of the Visual Studio .NET update, visit the following Microsoft Web site:

http://www.microsoft.com/Downloads/Release.asp?ReleaseID=39788

For the Korean-language instructions about how to download and install the Korean version of the Visual Studio .NET update, visit the following Microsoft Web site:

http://www.microsoft.com/Downloads/Release.asp?ReleaseID=39262

Release Date: June 13, 2002

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file. To determine if the update has been installed, verify that Q323302 appears in the About dialog box of your .NET product. (To access the About dialog box, click About  on the Help menu.)

How to Order Replacement Media
Microsoft will automatically ship new media to volume licensing customers and Microsoft Developer Network (MSDN) customers of the Korean language version of Visual Studio .NET. Customers who purchased the Korean language version of Visual Studio .NET as a full, packaged product in the retail channels can obtain replacement media by calling (82) (2) 537-1721 in Korea.

NOTE: Replacement media is not available for the Korean language version of Visual Studio .NET Professional 60-day Trial Edition. Users of the Trial Edition must apply the available update.

Installation Scenarios
If you select Local Path during Setup, the Help documentation is copied to the hard disk. When you apply the update, the infected document file is replaced. No more action is required; however, Microsoft recommends that you obtain replacement disks so that you do not have to reapply the patch with future installations. Destroy the infected CD or DVD after you receive the replacement media.

If you select Run from Source during Setup, the Help documentation remains on the CD or the DVD. The update does not replace the infected file because this file resides on the original CD or DVD. Obtain replacement disks as soon as possible, consider changing the installation type to include the Help documentation on the hard disk, and then apply the update.



STATUS
Microsoft has confirmed that this is a problem in the Korean language version of the Microsoft products that are listed at the beginning of this article.



MORE INFORMATION
Although the chance of infection is extremely low, Microsoft always recommends that you use antivirus protection. If the virus is activated, take conventional steps to disable the virus. Virus scanning programs may not detect the inactive virus that is contained in the compressed file. Use the update that is referenced in this article to remove the infected file.

Frequently Asked Questions

 * 1) Q: I installed the Korean language version of Visual Studio .NET. Am I now infected?

A: No. If you install or use the Korean language version of Application Center Test or Visual Studio .NET, you do not activate the virus. The installation does not cause you to become infected.
 * 1) Q: If I have already distributed an application that I created by using the Korean language version of Visual Studio .NET, are my users at risk?

A: No. Applications that you create and distribute by using Visual Studio .NET are not affected.
 * 1) Q: What should I do if I have already installed the Korean language version of Visual Studio .NET?

A: If you have already installed the Korean language version of Visual Studio .NET, install the update that is referenced in this article immediately. When you apply the update, the file that contains the inert virus is replaced. To obtain new disks, see the How to Order Replacement Media section of this article.
 * 1) Q: What should I do if I have the Korean language version of Visual Studio .NET but have not yet installed it?

A: Do not install Visual Studio .NET until you have obtained the replacement media and until you discard your current media. To obtain new disks, see the How to Order Replacement Media section of this article.
 * 1) Q: Can I remove the update?

A: No, you cannot remove this update.
 * 1) Q: How do I order replacement media?

A: To obtain new disks, see the How to Order Replacement Media section of this article.

Additional query words: patch uninstall Korean version

Keywords: kbprb KB323302

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.