Someone I know got infected. He sent me the file to analyze. I downloaded the zip and it contained a
scr file. I unzipped it and right-clicked to open it in Notepad++. It immediately got quarantined by my AV (Security essentials) and I could not view it.
Then the same guy told me that his AV (McAfee) has also quarantined it. However, next day he was infected. (Login was attempted on his bank accounts and email.)
I am now worried. Is it possible to get infected just by right-clicking?
OS is Windows 7.
EDIT: there was a difference in how I opened and how he opened. I right-clicked, while he double-clicked. Both of us got "quarantine popups".
Strange thing is that McAfee does not catch the virus: Virustotal scan results
So my theory is this:
He double clicked and it ran, then it downloaded some other virus files which were recognized by McAfee. This was what likely quarantined the virus.
I certainly hope that right-clicking on a malicious
exe (renamed to
scr) should not allow arbitrary code execution, unless there is a serious flaw in Windows.
EDIT2: As suggested by Daniel Ruf, here is the Malwr.com analysis.