IE7 beta/Yahoo! Search false positive?

When you visit http://search.yahoo.com in IE7, a bar pops up at the top of the page asking you if you'd like to set Yahoo! search as the default search option in the IE7 search box. On clicking the orange "Choose Yahoo!" button and saving the file to my HD, NOD32 shows the red "threat detected" window and says that ysetsearch.exe is "probably unknown NewHeur_PE virus".

The strange thing is, once I have downloaded the small file to my desktop and re-scanned it, NOD says that the file's clean.

Can anyone else confirm/deny this behaviour?

 

I don't get any pop-ups, could send that file to samples[at]eset.com for analysis?

 

Hi Marcos,

If you clear your cookies and delete all temp internet files, you should see the following....

http://img142.imageshack.us/img142/6919/yahoo0on.gif


I think the file got sent via ThreatSense, but I'll email it to you as well. As I said in my first post, NOD is only flagging the file when I click on the link on the Yahoo! page; when I scan it after it's been downloaded to my HD, NOD thinks it's clean. (It's AMON that's catching it as I don't use IMON)