ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Win.Trojan.Virut what does this mean on my 3 day old new pc
Bucky


Joined: 20 Mar 2019
Posts: 1
Location: Canada
Reply with quote
March 20, 2019, Wednesday



FOUND - what does this mean??

(below is the file location of what I have seen,

is there a virus form this game on my pc form Warface?
or is it protecting my pc, just thought to drop you guys a line to see what you might think.


FOUND: ??
C:\Program Files (x86)\Steam\steamapps\common\Warface\GameCenter\Chrome\3.3538.1848\libcef.dll: Win.Trojan.Virut-375 FOUND

C:\Program Files (x86)\Steam\steamapps\common\Warface\Warface\Bin32Release\mrac.dll: Win.Trojan.Virut-226 FOUND


Again thanks

Very Happy [/b]
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4570
Location: USA
Reply with quote
Games are a favorite hiding place for many viruses. However, I suggest you upload the file to Virus Total at https://www.virustotal.com/#/home/upload on the web to see what other AVs say about the file. ClamWin uses the scanning engine/database from Clam AV, so if Clam Av is the only Av on Virus Total spotting the file as being malicious, it is a "false positive" detection and not a real virus. In that case, Virus Total will tell Clam Av about the false detection so Clam Av can change its virus signature. It would not hurt for you to also upload the file to Clam Av at https://www.clamav.net/contact on the web to speed up the correction by Clam AV. It might be a week or so before Clam gets around to correcting their signature, so you should probably "whitelist" the file so ClamWin will bypass detecting it. You can whitelist a file via menu item(s) Configure, Filters, Exclude Matching Filenames--just copy the location (drive, folder, filename) in Exclude Matching Filenames. See the ClamWin Help files or contact us if you have any problems whitelisting. After a week or so, you should be able to remove the whitelisted file from ClamWin because Clam AV should have corrected their signature by then.

Virut is kind of an old virus, and Clam AV has had lots of false positive detections of it in the past, so most likely this is a false detection.

Thanks for using ClamWin! Remember to use it only as a backup scanner to a real-time Av.

Regards,
View user's profileSend private message
Win.Trojan.Virut what does this mean on my 3 day old new pc
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic