Re: virus

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Hi Elliott:

AV scanners on a PC do a pretty good job these days -- they have to!! I
don't think I have seen a false positive for a couple of years or more. I
have seen plenty of REAL positives :-)

On the other hand, the Macro Virus protection widget on the Mac is nowhere
near as good. Yes, it is safe, but it will give a lot of false positives.

All it checks for is to see if the "Container" that *might* hold
customisations exists in the document. If that container is present, the
alert will come up. It could simply be a customised keystroke, or there may
be no customisations at all -- if the container exists, the tool doesn't
check to see what's in it.

Cheers

On 19/1/07 2:09 AM, in article 180120071509090185%nospam@xxxxxxxxx, "Elliott
Roper" <nospam@xxxxxxxxx> wrote:

In article <C1D5490B.5C104%john@xxxxxxxxxxx>, John McGhie [MVP - Word
and Word Macintosh] <john@xxxxxxxxxxx> wrote:

No. If it comes back infected, tell them they're Incompetent :-) THEY have
the virus, not YOU :-)

Well, maybe. Your trust in the veracity of virus scanners is charming.

If it comes back clean, keep real quiet: YOU had a virus, not them :-)
Huh?. If it comes back clean, then it was the PC guys original document
that had the virus.

Err, I see now that I should have said if "it arrives at the PC
reported as infected" rather than comes back.

On 18/1/07 5:38 AM, in article 170120071838020535%nospam@xxxxxxxxx, "Elliott
Roper" <nospam@xxxxxxxxx> wrote:

In article <1169056257.597531.142290@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
granbyguy <jgyoung@xxxxxxxx> wrote:

Anything I produce in Word and send out comes back as being infected
with a virus. I believe it is attached Macros that are on by default -
I do not add any Macros. How do I get around this? Using Office 2004
v11.3

Let's assume there is nothing esoteric added to your Office
installation, such as a corporate global template lurking in your
Office startup folder

Now, with all Office applications stopped, hide ~/Documents/Microsoft
User Data/Normal somewhere. Renaming it in place to OldNormal would be
sufficient.

Now open Word, create a fresh document and send it to that whiny
sniveller that keeps complaining. If it comes back as infected, tell
'em they are paranoid liars.

If not, edit one of the files they sent you, and send that back.

You will know what to tell them. ;-)

--

Please reply to the newsgroup to maintain the thread. Please do not email
me unless I ask you to.

John McGhie <john@xxxxxxxxxxx>
Microsoft MVP, Word and Word for Macintosh. Business Analyst, Consultant
Technical Writer.
Sydney, Australia +61 (0) 4 1209 1410

.



Relevant Pages

  • Re: a-Squared false positives?
    ... decided to run a scan using a-Squared free with its latest updates ... I suspect many of these are false positives because ... But I also ran ZA Suite's virus check and it ... I'm tempted to agree with you, but that is an awful lot of malware to ...
    (microsoft.public.security.virus)
  • RE: Virus Scanners
    ... Virus Scanners work both by checking for the attributes listed by steve, ... well as the checksums of the virus, the individual code made by compiling ... I have never really used Norton so I can't especially comment on the ...
    (Security-Basics)
  • Re: Vuln Scanner for Web App Source Code
    ... It is not always simple to determine false positives and negatives ... These scanners all work better as tools in a "toolbox" that you use to ... money on secure development specific developer training (including ... and integrating security into your SDLC ...
    (Security-Basics)
  • Re: some attack to fedora machine .
    ... > Running virus scans is a waste of time. ... > once with multiple antivirus scanners, rootkit scanners, use windows and ... Each and every time the invader came in through ssh. ... is no root and regular users often use weak passwords that are used to ...
    (Fedora)
  • RE: [Full-Disclosure] A worm...
    ... >> virus scanning technology needs to be kicked up a notch or two. ... > scanning of all the common compression schemes. ... Most virus scanners do, by default, scan inside archive files (at ... would also allow it pass through many corporate Email ...
    (Full-Disclosure)