Re: Detected Virus Alert

From: Lance (lltbhill_at_linkearth.net)
Date: 05/14/04 

Date: Thu, 13 May 2004 21:00:03 -0700

Tim, in all wisdom, typed:
> I downloaded the file "xpsp1a_en_x86.exe" from the url:
>
http://download.microsoft.com/download/5/4/f/54f8bcf8-bb4d-4613-8ee7-db69d01735ed/xpsp1a_en_x86.exe
> then opened up a command prompt and entered
> xpsp1a_en_x86.exe -x to extract the files so i could
> "slipstream" the files into a legal copy of XP. Well Norton
> AV updated with 20040513-017-i32.exe version detected a
> virus called "Bloodhound.HybridCOM". I was just wondering
> why would i be getting a virus alert directly from a
> Microsoft download?
> File infected name: fpadmcgi.exe
>
> Got the idea from this site:
> http://www.windows-help.net/WindowsXP/winxp-sp1-bootcd.html

This is strange, I slipstreamed XP1a into my copy of XP using the same file
a while ago and never had a problem.

In fact, I just download the same file, using your link and extracted the
files using -x. Scanned the extracted files with Symantec AV Corporate
Edition with the same update (May 13, rev 17) and didn't get any alerts at
all.

The properties of my extracted fpadmcgi.exe file are:

File version: 4.0.2.6513
Description: Microsoft FrontPage CGI Server Administrator
Size: 24,632 bytes
Size on disk: 28,672 bytes
Created: Aug 29, 2002 3:41:24 am

Does yours match?

Lance
*****