There was recently a topic by @writer99025 discussing if Dropbox text files are safe in comparision to the MS Word docs. Though MS Word files seems pretty safe to use and you have a good trust in your anti-virus, things could go wrong for you.
I recently had this message from a buyer -
So, there was a MS Word doc file download from that link. My gut was telling me that something is wrong in here, so, I had opened the doc in a sandboxed word window.
There was a VB macro malware attached to the doc.
But the funny thing is, when I decompiled it(that’s pretty easy for word macros) there wasn’t any password stealers program as I was expecting. But a short code was written linked to the vb engine to produce a .bat file with some codes to run the IE window over and over and another snippet to add itself to the registry.(Perhaps to run itself when windows starts)
I had then, disabled macro execution in the MS Word and then again downloaded and opened the Doc straight from chrome. >>> It opened undetected by the anti-virus. I tried it with Avast! and QuickHeal and the case was same with both.
So, to conclude-
- Remember that MS Word files are not always safe. (Same for the files of all the programs in MS Office suite)
- Don`t open doc files straight from the download bar of your browser, they opens unscanned by most of the anti-virus programs.
- Disable the Macro execution in all the programs of the Office suite.