word 97 art-galery is a worm variant?

Discussion in 'ESET Smart Security v3 Beta Forum' started by X3ro, Jun 28, 2007.

Thread Status:
Not open for further replies.
  1. X3ro

    X3ro Registered Member

    Joined:
    Dec 3, 2005
    Posts:
    69
    Location:
    Omsk, Russia
    Could somebody check the distro of Office 97? beta1b says the following:
     

    Attached Files:

  2. ASpace

    ASpace Guest

    Do you mean Microsoft Word 97 ? Such thing should be legitimate however , on the other side , I doubt Microsoft would create a file with name 1.exe . I have seen another threat with name 1.exe , though , but never legitimate file with such name.
     
  3. X3ro

    X3ro Registered Member

    Joined:
    Dec 3, 2005
    Posts:
    69
    Location:
    Omsk, Russia
    the file is called 1.exe because it's restored from quarantine...

    that's why:

    PS. by the way ESS don't restore the infected file with the original extension. This (infected??) folder was checked by updated AOL ActiveVirusShield before...so..may be it's a fault positive?? Who can scan his own distro of Ofiice 97??
     

    Attached Files:

    • 222.jpg
      222.jpg
      File size:
      65.7 KB
      Views:
      93
  4. cupez80

    cupez80 Registered Member

    Joined:
    Jun 28, 2005
    Posts:
    605
    Location:
    Surabaya Indonesia
    have you tried to upload to virustotal ?
     
  5. X3ro

    X3ro Registered Member

    Joined:
    Dec 3, 2005
    Posts:
    69
    Location:
    Omsk, Russia
    Well well well... even Mr.K didn't see it. :cool:

    Screenshot removed per this policy.
     
    Last edited by a moderator: Jun 29, 2007
  6. cupez80

    cupez80 Registered Member

    Joined:
    Jun 28, 2005
    Posts:
    605
    Location:
    Surabaya Indonesia
    then send it to sample[at]eset.com :D maybe its true FP
     
  7. ASpace

    ASpace Guest

    Very few people , it is extremely old application . I can scan office XP/2003/2007 if you want to but it is no point :p
     
  8. X3ro

    X3ro Registered Member

    Joined:
    Dec 3, 2005
    Posts:
    69
    Location:
    Omsk, Russia
    offtopic: yeah, old, but if you have a dosen of old PCs - of97 is the only way, OOo is too huge for them
     
  9. Najmi

    Najmi Registered Member

    Joined:
    Mar 24, 2007
    Posts:
    36
    i will try to check it out
     
Thread Status:
Not open for further replies.