Microsoft: Some Office 2010 torrents infected

[dmex]

Microsoft advises staying clear of some Office 2010 torrents.

   Warning

The torrents distributed by some members of this site have been checked by me personally and did not contain any malware, worms or virus's

I wanted to post quickly to acknowledge the information that you have seen today around bits of Office 2010 being leaked. While all of us here are happy to see the incredible excitement and engagement (and are absolutely chomping at the bit to reach the July milestone) we aren’t quite ready to release the technical preview bits. I would encourage all of you to wait until the official bits are available to ensure the best possible experience and not miss out on anything we may include.

As a heads up, because we want to ensure our customers are safe, we have been monitoring various torrents and already detected quite a few that were infected. As a reminder, the Win 7 leak was used as a vector for attack and it’s not surprising to see this being used the same way. So, please be aware that if you download this torrent there is a very good chance you are also getting some unexpected malware with it.

In the meantime keep checking back as we will certainly have more updates.

Reed

The Microsoft Office 2010 IT Blog : Leaked build and Staying Safe

 

[z3r010]

Do we have MD5's for the clean images?

 

[jfar]

In other words, stay away from those bold sites, because you might get something for
nothing,

 

[Captain Zero]

Nice to see this posted, finally.

 

[oneextraid]

Universal Extractor 1.6 is a tool that can be used to extract setup files into there components. I have used this tool to extract the safe/good setup file for Office 2010. After extraction, run your virus scan against the files and it will flag the bad files. Free download.

 

[jimbo45]

Hi there

Here we go again -- How many times do we see this message repeated "Ad Nauseam" that stuff from Torrents *could* be infected.

You *Could* also shoot yourself if you stick a gun in your mouth and pull the trigger.

I'm sure torrent users are well aware of this and if they DO use material from these sources then they should always check the provenance of the material they are downloading.

If they don't then they DESERVE everything they get.

Sometimes also these messages are a pathetic attempt by big business to "stop Piracy".

Whilst we all don't condone Piracy including "lifting" commercial software the answer is often in the companies own hands

I don't know what planet some of these CEO's live on -- it's certainly not this one.

If you say We've got a product which will be available for testing in a few weeks time what do they expect people to do -- it's like waving a red flag at a bull.

People will want it early or try and show that the product is just Vapourware. In either case this could have been avoided if MS had just said -- OK we've got this product --go and test --especially as it only lasts (initially) for 30 days anyway.

Cheers
jimbo

 

[dmex]

Do we have MD5's for the clean images?

No, I did ask some people to post their Hashes in the "Office 2010 leaked" thread so I could make sure they where identical to mine ad add them to my post but no one bothered :huh:

Nice to see this posted, finally.

hehe, I was a little busy preforming maintenance and a few upgrades on the Search Server (Search Center - SevenForums Search) when I read your PM asking me to post about it

 

[holo88]

i always scan the hell out of everything i d/l ... the mini-van-nova link that was provided on THIS SITE didn't throw up any flags. im sure after like a day or so someone up'd a diseased version on the lesser torrent sites. most of the time they'll have some cheesy generic label on them. e/g "Microsoft-Office-2010-Full-Retail!!!" i'm not going to name the site i saw that on, just so people WILL KEEP THEIR EYES OPEN.

 

[12eason]

Microsoft: My cat's breath smells like cat food.

 

[torrentg]

ms_office2010_techical_preview_1_x86_en.rar

CRC32: F492F340
MD5: AA91CD4BF23866CFCE795831DA09A7AC
SHA-1: 20604375FF11D3579AE01F6EE1DACD62845137B0

Did not get x64 as I can't use it.

 

[jimbo45]

ms_office2010_techical_preview_1_x86_en.rar

CRC32: F492F340
MD5: AA91CD4BF23866CFCE795831DA09A7AC
SHA-1: 20604375FF11D3579AE01F6EE1DACD62845137B0

Did not get x64 as I can't use it.

I don't think that this actually helps as it's a RAR file.
Now unless i'm mistaken MS would only distribute stuff in one of 4 formats

1) .MSI
2) .CAB
3).EXE
4).ISO

For a suite like office 2010 it IMO will be officially released as an ISO. I can understand a leaked version being a .RAR file as it will be compressed and require a smaller upload -- also it's easier to "Acquire it" in small pieces like on a USB stick for merging later "after it's been removed from the labs".
However the verion leaked on this site passes all scan tests as others have indicated -- but I would suggest that the hash sums posted won't be the same as what will be on the ISO when "officially" available.

Cheers
jimbo

 

[torrentg]

Yep, was thinking the exact same thing. Also, notice the spelling of the file (which is how I downloaded it as.)

Anyway ya. Whomever released this probably just copied the files from DVD to a folder and rared. Works for me and the hash is good for now so at least others that got their hands on and altered after we saw it are weeded out.