Re: PP2007 vunerable to Bloodhound.Exploit.84
- From: stephen_wq <stephenwq@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Wed, 11 Oct 2006 23:17:01 -0700
Get ready for some reading, im telling the whole story.
1)The name of the Symantec product i am using is Norton Systemworks 2006
Premier, with latest virus definitions.
2)I have no other antivirus products installed, but i do have antispyware
products installed.
3) I'm unsure about this, so heres the whole story, i'll let you decide:
The virus was detected while working on the powerpoint, and so i could still
move things around. I attempted saving it again, but it also became infected
in the file. I did not try with .pptx. I opened another copy of powerpoint
and copied the slides and saved as .pptx. This was not detected as having any
virus when i saved it. I moved this file to another machine on my home
network, also with powerpoint 2007 as well as windows live Onecare 1.5, it
also did not detect it as a virus. I saved this as Awards.ppt on the other
computer and placed it on a usb storage device along with the pptx and the
compatibility pack for 2003 as a backup.
I took this to work and the .ppt file was not there anymore. I cannot find
any log of it being deleted in Symantec Antivirus (Version 10.0.1.1000,), so
it is possible it did not transfer properly. I opened the .pptx after
installing compatibility pack and it told me i needed to install something
since it was a 2007 file, which i thought i had already installed. It slowly
opened, and then a virus was detected and quarintined in the .tmp file
created by the powerpoint. Norton antivirus originally at home found the
virus in the .ppt
I zipped the .ppt back at home and sent it to the work mail server.The
corperate antivirus product detected it as a virus in the zipped folder and
deleted it. I attached the original .pptx from the other computer at home and
then emailed it again. It was not blocked but when i uncompressed it on my
work laptop, it was detected again and the tmp file quarintined. At home I
moved the .pptx and .ppt back to this computer that it was originally made
on, and it does not appear to have a virus, niether the ppt or the pptx that
Symantec Antivirus says had a virus had it, according to both Onecare and
Norton Antivirus 2006. Either Symantec Antivirus is telling lies, or Home
antivirus products leave a lot to be desired.
4)I get no problem of any kind anymore while saving .ppt files, and the same
is for doc. I dont know whether its infected or not, norton says it isn't,
but relitive to the symantec antivirus product at work, i dont know what to
believe.
5)The powerpoint i made was blank, with a built in template and made from
scratch. No macros that i know of.
6)I no longer have the original infected .ppt file, that norton antivirus
detected. But i do have 4 quarintined .tmp files from Symantec antivirus,
still in quarintine.
7) See 6
8) See 7
Hope this confusing story makes sense.
I know that symantec hasnt released a version that is compatible with 2007,
but i have disabled office protection in Norton Antivirus as this prevented
me from opening any office documents all together.
I know that it was made by me. I definately know that MS wouldnt want to
take over my computer, and unless that myth about antivirus companies making
the viruses themselves is true, i definately know they wouldnt want to make
viruses.
I can only offer the 4 quarintined files for examination, and since they are
in Symantec antivirus, there doesnt seem to be a send to symantec function as
described in that article.
.
- References:
- Re: PP2007 vunerable to Bloodhound.Exploit.84
- From: Steve Rindsberg
- Re: PP2007 vunerable to Bloodhound.Exploit.84
- Prev by Date: Re: PowerPoint Mood Music
- Next by Date: TimeLine and Shyam!
- Previous by thread: Re: PP2007 vunerable to Bloodhound.Exploit.84
- Next by thread: Re: PP2007 vunerable to Bloodhound.Exploit.84
- Index(es):
Relevant Pages
|