accicons.exe

good morning
Today I encountered the following message:

C:\WINDOWS\Installer\{90110410-6000-11D3-8CFE-0150048383C9}\accicons.exe contiene probabilmente una variante di Win32/TrojanDownloader.Agent trojan horse.

but it is no office executable?

Thank's

 

I have the same problem since this morning. Getting bombarded with mail alerts like these:

19-4-2010 10:03:00 - Module Real-time file system protection - Threat Alert triggered on computer FOO: C:\WINDOWS\Installer\{90110413-6000-11D3-8CFE-0150048383C9}\accicons.exe contains probably a variant of Win32/TrojanDownloader.Agent trojan.

accicons.exe is actually a valid Office 2003 file containing Access icons. Eset, please stop with the false positives, it is becoming annoying.

 

It is in effect a valid Office File as, noted, installed here:

How to submit to ESET's labs for analysis

 

We're analyzing the file we've received from some of you. The same file we've got here is even whitelisted to prevent it from being detected accidentally.

 

I've uploaded the accicons.exe to www.virustotal.com and it definitely is a false positive. My version of accicons.exe is from the dutch version of Office 2003 Pro, SP3 by the way.

What will Nod32 decide to flag next, ntoskrnl.exe maybe?

 

+1 with ~70 PCs with false positive detection
file sent to samples@eset.com

 

Fixed here by virus signature database 5041.

 

Thanks to everyone for the info

bye