word 97 art-galery is a worm variant?

Discussion in 'ESET Smart Security v3 Beta Forum' started by X3ro, Jun 28, 2007.

Thread Status:
Not open for further replies.
  1. X3ro

    X3ro Registered Member

    Joined:
    Dec 3, 2005
    Posts:
    69
    Location:
    Omsk, Russia
    Could somebody check the distro of Office 97? beta1b says the following:
     

    Attached Files:

  2. ASpace

    ASpace Guest

    Do you mean Microsoft Word 97 ? Such thing should be legitimate however , on the other side , I doubt Microsoft would create a file with name 1.exe . I have seen another threat with name 1.exe , though , but never legitimate file with such name.
     
  3. X3ro

    X3ro Registered Member

    Joined:
    Dec 3, 2005
    Posts:
    69
    Location:
    Omsk, Russia
    the file is called 1.exe because it's restored from quarantine...

    that's why:

    PS. by the way ESS don't restore the infected file with the original extension. This (infected??) folder was checked by updated AOL ActiveVirusShield before...so..may be it's a fault positive?? Who can scan his own distro of Ofiice 97??
     

    Attached Files:

    • 222.jpg
      222.jpg
      File size:
      65.7 KB
      Views:
      93
  4. cupez80

    cupez80 Registered Member

    Joined:
    Jun 28, 2005
    Posts:
    609
    Location:
    Surabaya Indonesia
    have you tried to upload to virustotal ?
     
  5. X3ro

    X3ro Registered Member

    Joined:
    Dec 3, 2005
    Posts:
    69
    Location:
    Omsk, Russia
    Well well well... even Mr.K didn't see it. :cool:

    Screenshot removed per this policy.
     
    Last edited by a moderator: Jun 29, 2007
  6. cupez80

    cupez80 Registered Member

    Joined:
    Jun 28, 2005
    Posts:
    609
    Location:
    Surabaya Indonesia
    then send it to sample[at]eset.com :D maybe its true FP
     
  7. ASpace

    ASpace Guest

    Very few people , it is extremely old application . I can scan office XP/2003/2007 if you want to but it is no point :p
     
  8. X3ro

    X3ro Registered Member

    Joined:
    Dec 3, 2005
    Posts:
    69
    Location:
    Omsk, Russia
    offtopic: yeah, old, but if you have a dosen of old PCs - of97 is the only way, OOo is too huge for them
     
  9. Najmi

    Najmi Registered Member

    Joined:
    Mar 24, 2007
    Posts:
    36
    i will try to check it out
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.