cancel
Showing results for 
Search instead for 
Did you mean: 
hriddoch
Level 7

Malware file CAR014151239.doc

I'm running McAfee internet security on my PC  I just accidentally opened this malware file, that came attached to an email,  I realised as it was opening that  it was probably Malware  and immediately closed it, nothing appeared on the word page  and  I did not receive any warnings

I understand from searching the internet that this is pretty new,  I did a quick scan and nothing was found and am now in the process of doing a full scan

is this malware recognised by Mcafee

0 Kudos
4 Replies
Hayton
Level 17

Re: Malware file CAR014151239.doc

No McAfee detection yet that I can see but the AV companies are picking up on this pretty fast so I expect McAfee to include it very soon. The dangerous part is in a Word Macro so if you're blocking those (opening documents in Protected View) you're probably okay.

http://sanesecurity.blogspot.co.uk/2014/12/word-document-malware-aquaid-receipt-of.html

https://www.virustotal.com/en/file/c3b99aa07e32acf3411a46dc484fbb6f9327398e207fbd1595a964084bb8a375/...

https://www.virustotal.com/en/file/048714ed23c86a32f085cc0a4759875219bdcb0eb61dabb2ba03de09311a1827/...

0 Kudos
exbrit
Level 21

Re: Malware file CAR014151239.doc

Moved to Malware Discussion > Home User Assistance.

0 Kudos
hriddoch
Level 7

Re: Malware file CAR014151239.doc

Thanks

just checked my word settings   for a macro's and its "Disable all Macro's with Notification" which I assume means that  I should be OK, the file never fully opened when I hit the close button and I certainly did not get any notifications about macro's

Lucky escape I hope

hopefully McAfee  will have it in their Data Base soon  to give me peace of mind

0 Kudos
Hayton
Level 17

Re: Malware file CAR014151239.doc

"Disable All Macros" will protect you against many (or even most) Word-based threats. Not perhaps all, malware writers are extremely inventive.

But here, you had (as you say) a lucky escape. No damage done, it seems.

I'l mark this as Assumed Answered if that's okay with you

0 Kudos