Avast has decided my ms word docs (MS Word 2000) are suspicious and terminates them. If I work fast I can copy them into Open Office, but really, this is unacceptable.
so you dont consider that they realy are infected. :
could you give some more onfo…what does avast say…what malware name does avast give the files
upload suspicious file(s) to www.virustotal.com and test with 40+ malware scanners
when you have the result, copy the url in your address bar and post it here for us to see
It says:
Avast! has finished analysis of the program.
We did not find enough evidence to identify the file as malward.
However you should still use extreme caution when accessing it.
file: C:/Program Files/Microsoft Office?../WINWORD.EXE
Reason: 5the file prevalence/reputation is low.
Buration 0:00:14
The program has not terminated.
For the next execution of this file do the following:
Open in sandbox (recommended)
Or Open Normally
Here are scans on a couple of files. The first downloaded from a trusted source.
the second generated by me.
SHA256: ebe4459a851bbe1e756cae90c6e72cf55a06a31131509c03e50aaec48ab64c5d
File name: 330 Intro.doc
Detection ratio: 0 / 42
Analysis date: 2012-05-14 22:52:08 UTC ( 0 minutes ago )
0
0
More details
Antivirus Result Update
AhnLab-V3 - 20120514
AntiVir - 20120514
Antiy-AVL - 20120514
Avast - 20120514
AVG - 20120515
BitDefender - 20120514
ByteHero - 20120514
CAT-QuickHeal - 20120513
ClamAV - 20120514
Commtouch - 20120514
Comodo - 20120514
DrWeb - 20120515
Emsisoft - 20120514
eSafe - 20120514
eTrust-Vet - 20120514
F-Prot - 20120514
F-Secure - 20120515
Fortinet - 20120515
GData - 20120514
Ikarus - 20120514
Jiangmin - 20120514
K7AntiVirus - 20120514
Kaspersky - 20120515
McAfee - 20120514
McAfee-GW-Edition - 20120515
Microsoft - 20120514
NOD32 - 20120514
Norman - 20120514
nProtect - 20120514
Panda - 20120514
PCTools - 20120514
Rising - 20120514
Sophos - 20120515
SUPERAntiSpyware - 20120512
Symantec - 20120514
TheHacker - 20120514
TrendMicro - 20120514
TrendMicro-HouseCall - 20120514
VBA32 - 20120514
VIPRE - 20120515
ViRobot - 20120514
VirusBuster - 20120514
Comments
Votes
Additional information
No comments
SHA256: 4c22341facc909b4dc302291e12d77d4ac3590b454a83ff76579a8a19f727bcf
File name: let blank.doc
Detection ratio: 0 / 42
Analysis date: 2012-05-14 22:55:28 UTC ( 1 minute ago )
0
0
More details
Antivirus Result Update
AhnLab-V3 - 20120514
AntiVir - 20120514
Antiy-AVL - 20120514
Avast - 20120514
AVG - 20120515
BitDefender - 20120514
ByteHero - 20120514
CAT-QuickHeal - 20120513
ClamAV - 20120514
Commtouch - 20120514
Comodo - 20120514
DrWeb - 20120515
Emsisoft - 20120514
eSafe - 20120514
eTrust-Vet - 20120514
F-Prot - 20120514
F-Secure - 20120515
Fortinet - 20120515
GData - 20120514
Ikarus - 20120514
Jiangmin - 20120514
K7AntiVirus - 20120514
Kaspersky - 20120515
McAfee - 20120515
McAfee-GW-Edition - 20120515
Microsoft - 20120514
NOD32 - 20120514
Norman - 20120514
nProtect - 20120514
Panda - 20120514
PCTools - 20120514
Rising - 20120514
Sophos - 20120515
SUPERAntiSpyware - 20120512
Symantec - 20120514
TheHacker - 20120514
TrendMicro - 20120514
TrendMicro-HouseCall - 20120514
VBA32 - 20120514
VIPRE - 20120515
ViRobot - 20120514
VirusBuster - 20120514
Comments
Votes
Additional information
No comments
Is there a “?” in the name? Which is the real full path?
I don’t know what you are talking about. I just ran the file scan check as requested.
The names of the files are -
C:\Documents and Settings\Dorothy\My Documents\Morya School\330\330Intro
C:\Documents and Settings\Dorothy\My Documents\letblank
There are no question marks in the file name.
Every MS word doc I have is coming up with this problem now.
No, I don’t believe they are all infected in any way.
I suspect I just need to change the settings for Avast, but I don’t know which ones t
Hmmm…I just opened them again and Now they are OK. I can open them without the avast message saying I need to run them in Sandbox and then terminating them.
o eliminate.
Are you using genuine MS Office? Because only reason for MS Office components to get low reputation is that its components are modified aka hacked (and thats what results in low reputation since the modified versions aren’t as common as genuine ones).
There was a question mark in the original post from you (just after the word Office…).
Strange… Do they lose the extension .doc or .docx?
Are you using genuine MS Office?
Yes.
Strange… Do they lose the extension .doc or .docx?
I don’t know.
How would I tell when it bring up a doc, if there is an extension?
Since it is not happening now I can’t look.