ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Probably false alarm on multi "omni.ja" of differe

Joined: 13 Nov 2021
Posts: 1
Reply with quote
Hi All !

My last scan, using clamav 0.99.1, this day returns some files named
"omni.ja". Looks like, more or less all my browsers use it, like firefox and palemoon
and they are all located within the brwoser profile directory tree.
For example:
>C:\Program Files\Pale Moon\browser\omni.ja: Html.Exploit.CVE_2017_8757-6336185-0 FOUND<
I restored the files from backup, even month ago, but they all look infected.
That probably a wrong alarm, because my scans run all around the clock
and would have found them earlier.I uploaded the file to virustotal and they say, everything is fine with it! showbox speed test

Anyone out there, having the same problem?
For me, this looks like a problem with the signatures, but I am not sure.

Thanks anyway,

Windows Server 2008 R2, en
clamav 0.99.1

Last edited by HashmatullahShahidi on Wed Nov 17, 2021 3:18 pm; edited 1 time in total
View user's profileSend private message

Joined: 09 Jul 2006
Posts: 4935
Location: USA
Reply with quote
Are you referring to Clam AV for Linux or ClamWin for Window?. These forums are for ClamWin for Windows, although ClamWin uses the Clam AV scanning engine/signatures. The Clam AV signatures get more false positives than most AVs. If Clam Av is the only AV on Virus Total spotting malware, there is a 99.5% possibility that it is malware. You should upload any false positive files to the Clam AV web site (Contact, False Positives) so they can correct their erroneous signature.

View user's profileSend private message
Probably false alarm on multi "omni.ja" of differe
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

 Reply to topic