Win32:Warezov-MF [Wrm]

[alan_v]

I receivd a mail telling me i was sending out viruses.  There was an attachment with the mail which had the sort of name that windows uses for updates (KB1240-x86.zip).  I selected the right click,scan with avast option with no virus detected.  I unzipped the file and scanned it again, still no virus detected. However when I went to open it, Avast picked up the above worm.  I was surprised that nothing was detected when I right clicked and selected scan.  Is this a feature of the virus (that it disables the virus scan!) or is there a problem with avast in this repect.

[mauserme]

Welcome to the forum alan_v.

Can you double check the name of the worm?  I don't see the variant you posted in the list of detections.

[DavidR]

Thankfully avast did catch it in the end.

However, this is the kind of social engineering that is being used to try and get people open and run attachments. Patches, etc. aren't deployed in this way so you should treat these with extreme caution even if avast doesn't initially detect anything, new variants are always one the go.