Author Topic: What is MW97:CVE-2006-2492 [Expl] ?  (Read 24853 times)

0 Members and 1 Guest are viewing this topic.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89286
  • No support PMs thanks
Re: What is MW97:CVE-2006-2492 [Expl] ?
« Reply #30 on: December 19, 2007, 03:57:21 AM »
Oh my god, you must have told avast to delete them as avast doesn't delete automatically.

avast scans and alerts you to infection and if you have the home version gives options and you make the choice, move to chest, move and rename, delete, ignore and repair (if available), etc. and you must have chosen delete.

The avast pro version can be set up to take automated action on detection and you can choose on an option like Repair, if not possible, move to chest, move rename, etc. but, again there is no autonomous deletion of infected files, the user must either interact and make a choice or have set it up to take action automatically.

So there should be no problem in keeping avast running when you are working with xls files or any other file unless they happen to be infected in which case the 'first do no harm' don't delete.

Deletion isn't really a good first option (you have none left), send virus to the chest and investigate. If you really have deleted them and not sent them to the chest you may be luck and use a file recovery tool undelete or something like that or you will have to use your back-up to restore them (you do back-up your data files.

Are you really sure you have the same problem as 1) MW97 is a microsoft word related micro detection and 2) the VPS of 9th Dec more than 2 days ago. So you must ensure that you have the latest updates.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

PatrickLiang

  • Guest
Re: What is MW97:CVE-2006-2492 [Expl] ?
« Reply #31 on: December 19, 2007, 08:43:32 AM »
Avast is no longer to block my xls files now.
The virus code is MX97:CVE-2006-3431[Expl].
I tried to select move to chest option before,but just few could restore from the chest,some were missing.And the first report of virus found is called Malware,I've used all the Trojan killer tools to scan our system as I could,but found nothing.
So I visit this forum to search technical support.After I saw this title,I think it may be the same situation as mine.
Now I'm wondering whether it is a false virus report too or not.

kubecj

  • Guest
Re: What is MW97:CVE-2006-2492 [Expl] ?
« Reply #32 on: December 19, 2007, 10:01:43 AM »
CVE-2006-3431 is quite different exploit, it was about malformed Excel document. Our detection was wrong, partly because of low number of exploit samples, partly because of wrong and insufficient MS documentation.

This was fixed in the last vps update.

PatrickLiang

  • Guest
Re: What is MW97:CVE-2006-2492 [Expl] ?
« Reply #33 on: December 19, 2007, 10:35:03 AM »
Thanks for your respond.

This problem screwed me up before,execl files are our most important documental files.
Hope this won't happen again.

rsc

  • Guest
Re: What is MW97:CVE-2006-2492 [Expl] ?
« Reply #34 on: October 31, 2008, 04:14:34 AM »
I just had my U3 version find this "virus" when I scanned my computer with the thumb drive version. Is this a false positive that hasn't been fixed also?