This is just a FAQ file, in HTML.
Can you simply delete it from your system?
Or maybe insert some junk characters (spaces, dashes, underscores etc.)
into the "infected" text e.g. change to
n-ew('O-utlook.A-pplication', etc.
Hopefully helpfully yours,
Steve
--
Steven Tolkin [EMAIL PROTECTED] 617-563-0516
Fidelity Investments 82 Devonshire St. V10D Boston MA 02109
There is nothing so practical as a good theory. Comments are by me,
not Fidelity Investments, its subsidiaries or affiliates.
-----Original Message-----
From: Joel Gwynn [mailto:[EMAIL PROTECTED]]
Sent: Thursday, September 27, 2001 12:45 PM
To: [EMAIL PROTECTED]
Subject: [Boston.pm] win32::ole giving false positive.
I'm using win32::ole to open an excel spreadsheet. The code used to work,
but then they installed antivirus software on the server (windows NT Server,
Norton Antivirus), and I think that's why my code doesn't work anymore.
I did a little searching, and found this from
http://aspn.activestate.com/ASPN/Reference/Products/ActivePerl/RELEASE.html
<http://aspn.activestate.com/ASPN/Reference/Products/ActivePerl/RELEASE.html
>
<snip>
Norton AntiVirus 2000 detects VBS.NewLove.A in the file
ActivePerl-Winfaq12.html.
Workaround
This is a false positive by Norton AntiVirus. ActivePerl-Winfaq12.html has
been examined by hand, and it is likely that the following example code is
what causes the false report.
<BLOCKQUOTE>
<P><CODE>use strict;<BR>
use Win32::OLE;<BR>
use Win32::OLE::Const 'Microsoft Outlook';<BR>
<BR>
my $Outlook = Win32::OLE->new('Outlook.Application', 'Quit');<BR>
my $ol = Win32::OLE::Const->Load($Outlook);<BR>
<BR>
my $namespace = $Outlook->GetNamespace("MAPI");<BR>
my $Folder = $namespace->GetDefaultFolder(olFolderInbox);<BR>
my $NewFolder =
$Folder->Folders->Add("Test1");</CODE></P>
</BLOCKQUOTE>
This can be tested by removing the above code from the
ActivePerl-Winfaq12.html file and rescanning with Norton AntiVirus. Norton
AntiVirus will no longer detect VBS.NewLove.A.
Symantec has been notified of this issue.
</snip>
So, by 'workaround', the mean brick wall? Is there a way around this?