On 06/27/2011 04:08 AM, David H. Lipman wrote: > From: "Rieta Grimm" <[email protected]> > >> Hi, >> I had your program installed on my computer after I did a clean install of >> windows xp. >> I >> removed OpenOffice because I don't have time right now to learn it. >> However, since I've >> installed it and uninstalled it whenever I do a scan I keep getting this >> virus: Gen:Variant.Kazy.7792 >> and I >> couldn't figure out where it was coming from, but today I did, as soon as it >> gets to the >> Open Office folder that was left behind from uninstall I get this virus and >> my Virus >> Scanner can only delete it and not disinfect it. It also has an extension >> of .vbt on >> each >> of the files and there are multiples. >> >> So, this is where on my computer it is: C:\documents and setting\Downloaded >> info\Open >> Office.org (en-US) Installation Files >> >> As soon as my spyware program gets to that point I get a message and it's >> the only time >> that it occurs and it's related to Open Office. I just thought you ought to >> know about >> it >> so you can fix it. However, I'm now going to have to do another clean >> install in order >> to >> get rid of it. >> >> Have a nice day, > > Gen:Variant.Kazy.7792 is NOT a virus. The term "virus" is overused an > abused. All > viruses are malware but not all malware are viruses. > > A variant of Generic Kazy is a heuristic detection for a trojan and in all > probabilities > is a False Positive declaration by your un-named anti malware solution. > > There is NOTHING OpenOffice can do to fix a False Positive declaration by an > un-named anti > malware solution. It is that un-named anti malware solution that has to > correct its > signatutes to negate the False Positive declaration. > > I have POCs at many anti malware vendors. To correct this you need to > identify EXACTLY > what files are being detected (or send me copies of said files) and indicate > who is the > vendor of the un-named anti malware solution that declared this False > Positive of > "Gen:Variant.Kazy.7792". >
<http://www.google.com/search?q=openoffice+%2BKazy&btnG=Search> <http://www.google.com/search?q=libreoffice+%2BKazy> indicates that this is a false positive by some AV products. Perhaps if the OP can provide information regarding the AV/AM product being used, and the version of OOo then Rieta can be pointed to information regarding false positive or other details. -- ----------------------------------------------------------------- To unsubscribe send email to [email protected] For additional commands send email to [email protected] with Subject: help
