Disappearing probable WM/Nuclear.D variant

Scanning a customers HDD NOD32 2.5 beta detected "E:\CDROM\CYBEC.DOC - probably a variant of WM/Nuclear.D virus" on a scan operation. The file was not cleaned, modified or altered in any way I've been able to discover however it is now undetected by further scans.

"CYBEC.DOC is a Microsoft Word document which will remove the
WinWord.Concept Winword.Nuclear.A and Winword.Nuclear.B virus
from your Word documents. The WinWord.Concept virus is also known
as the Word Prank virus."

Any suggestions - has the beta got some kind of AI for fine tuning its 'probable' detection?

 

Can you forward that file to samples@nod32.com and see what they have to say.

Also, would appreciate if you can keep us up-to-date with your progress, as we all learn this way...

Cheers

 

lol @ me
In the virus log AMON had found and cleaned it automatically after the 'SCAN' operation and before I came back to look at it.
I've got the 2.5 beta set to submit samples and statistics automatically. Would you suggest still emailng samples@ anyhow?

 

Of course, if you still have the original file (not already cleaned by AMON), send it to samples@eset.com. Other samples detected by heuristics should be submitted using the Early Warning System.

 

Do I still have the original file (Step 1 - image HDD. Step 2 - 'Scan')
...
Done

and another happy customer upgrading to NOD32