macro script virus, invoice attachment

AbbieCadabra

i 'think' i'm ok, but just want to check!

i'm usually so careful with any emails with attachments from unknown senders & just delete them. however i got one yesterday that looked different as the attachment was a word doc instead of the usual zip file. it could have been something that was ordered for our business that i hadn't been advised of.

i didn't actually open the doc, just briefly clicked on the side option to 'open as web page'. the window only just opened then i closed it again as it dawned on me what it probably was.

this is the info on the email.

i've done an AVG (free) full scan, malwarebytes anti-malware & also a scan with an online checker that was recommended on another forum (eset virus checker) - all have come back clear & my laptop is running fine. word appears to be working ok too, nothing out of the ordinary.

mozilla firefox is my browser.

have i dodged a bullet?!

aerostar

I would think you have been lucky ! there is and has been a spate of these including excel files, word files, zipped files with .arj, or lha extensions, the non zip files usually have macros embedded in them, these automatically insert keypresses etc into the keyboard, and execute code, the zipped files usually have .exe or .vbs in them, and or programs.

If you are using MS Office then Google for turning off Macros - it is quite easy, this will at least give you some protection.

The best protection is to treat ALL attachments as suspicious and check BEFORE opening that the from is from an address you may know, that of course could be forgrd ! AND check that you are expecting the document from the company, (call them).


For added safety you could download sandboxie use that when suspicious. Google Sandbox.

Quiet_Spark

Do you have the "Show all file extensions" option enabled?

If not, enable it and then check the file name as it is very easy to disguise file types.

eg, word.doc could quite easily be word.doc.vbs (or some other type of executable) but if the show all extensions is off (which it is by default) then all you will see is word.doc in the file name.

AbbieCadabra

Quiet_Spark wrote: »

Do you have the "Show all file extensions" option enabled?

If not, enable it and then check the file name as it is very easy to disguise file types.

eg, word.doc could quite easily be word.doc.vbs (or some other type of executable) but if the show all extensions is off (which it is by default) then all you will see is word.doc in the file name.

Thanks. Wouldn't really know where to start with that to be honest! I've decided i'm going to have to take it somewhere to get checked as i had to log into one of my bank accounts this afternoon & a pop up appeared on chrome asking if i wanted to save my password. It's never done that before so now i'm worried that this is part of the malware/trojan.

Just can't take the risk & i really don't know enough to sort this one, so will find a local expert, & try to concentrate harder in future - so annoyed with myself as i really do know better!

Quiet_Spark

Start > Control Panel > Folder Options > View

Scroll down to "Hide extensions for known file types", remove the tick and apply.