Office 2003 Setup.exe - marked as infected???

As you can see in the summary Mal/Behav-356 is quite new. A few days ago an update caused a small application I have around since 2005 to be detected as Sus/Compack-C. I sent in the sample and obviously Sophos has updated the detection accordingly since it's no longer marked as suspicious.

So just contact support.

Christian 

Thanks, I'll do that

Well, seems that I have had no luck in submitting this file due to the following message -

• File C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\INFECTED\SETUP.EXE.000 either does not exist or exists but contains no data.

I've added the file to the exclusion list and it is 1Mb in size so must contain data of some form....

Not sure what to try next!

If Sophos is blocking it you should get a message but anyway: How to submit a sample

1. Turn on-access checking off (but be careful with your index finger)
2. Zip the file(s) with a password (which you then enter on the submission form)
3. Turn on-access checking on
4. Submit the .zip

Exclusions a tricky, tedious and affect policy compliance.

Christian

Many thanks, I have been able to submit the file.