Avast tells me that two word documents are infected with MW97:CVE-2006-2492 [Expl]. I have goggled and searched everywhere but can’t find any info. The documents were created by me with Word 2007. Is this a false alarm?
Thanks.
I too have the same problem with 4 word files. Don’t have a clue how to open them. I tried repairing office Xp but no luck. Any advice anyone?..Please!
Yours…Bob
I’m having the same problem. All of a sudden my Word 2002 files are showing up as infected.
CVE-2006-2492 is a vulnerability summary of a security problem with MS word:
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-2492
MW97 I expect means MS Word '97.
Submit a sample file to VirusTotal to confirm it is infected.
If only avast! is showing the file as infected, send the file to virus[at]avast.com and mention it’s a possible false positive.
My docs created in Word 2000 then updated in Office XP. I last updated them in October, I’ve never e’mailed or attached them to any other prog. I have them backed up on a pen drive and they also are infected. Any advice please? Sent them to Virus Total but not sure of the outcome. It said no bytes were received.
Bob
OK, you’ll need to temporarily disable avast! in order to send the file, otherwise avast! will just block it.
Right click the avast! icon in the notification area.
Guys, please, everyone sent the zipped samples to us.
Directly to kubecj AT asw DOT cz
Thanks.
I have a folder on my C:\ drive for suspect files that I exclude from scans (say C:\suspect, imaginative yes), any files I want to upload to VT or don’t want scanned I place there, that way you don’t have to pause avast as the web shield doesn’t scan uploads.
Firstly, my thanks for your help in this matter. I sent file to Virus total and only Avast showed it as infected.
Bob
Looks like it is likely to be an FP, if you can zip and password protect the sample/s ‘virus’ will do place the password in the body of the email and send it to kubecj as he requested in his post.
Fixed in the internal version, will come out as soon as possible.
Sorry for any troubles.
Can anyone say if this is indeed a ‘false’ virus?
67 Word docs have been infected, the fist one yesterday evening (4-12-2007) the other 66 this morning.
And if it is a false virus, how can it be restored
It is false alarm and next VPS update will fix this.
Zipped file as suggested and sent to kubecj. I’m seriously thinking of ditching Avast for another AV tho I’ve used it for 4 years now with no problems.
Thanks kubecj! Does that mean that files that have been moved to the ‘safe-environment’ in AV can be restored, or will this be fixed ‘automaticly’ with the new update?
If you moved them there manually, simply return them back.
If you put them into the chest, follow these instructions:
To remove the file(s) from the chest, simply open it, right-click on the file you wish to remove and from the menu select “Extract”. Specify the folder you wish to extract the file to and press OK.
So you have used avast for 4 years with no problems and you are considering ditching it, over what a false positive that was quickly corrected ?
False positives are a fact of life with anti-virus programs and avast is no different. Well different in that it acknowledges if it is a false positive and responds very quickly to analyse and correct it when reported.
I ran manual updates short while ago in Avast and all seems fine. Word docs opening fine now and were restored from virus vault ok. Though I had a backup of all my files, (Always Important)… some hadn’t been updated and I thought thought I’d lost them, but all is fine. Thank you everyone for your input and help with this matter.
In response to David R…this was my first experience of “false positives”…and was a bit disturbed by it, as I was unaware of what had happened and not sure how avast would respond to it. My knowledge of Avast (or any AV for that matter) is limited as I tend to just let it do it’s job. I’ve never had virus in Word docs before and was somewhat in the dark…that’s all. Don’t judge me just because of my ignorance…OK?
Kubecj,
Thanks for your adequate & quick reponse. I have moved the files to chest every time the Avast pop-up gave a malware warning (67 times)
Do I have to wait till the problem is fixed? Otherwise it might be detected again as Malware?