After a recent definition file update, ClamWin reported the following virus/trojan found:

- "C:\Program Files\KeyScrambler\Uninstall.exe: Trojan.Zlob-10486 FOUND"

I am using the free version of KeyScrambler ("Personal" edition) from QFX Software. I've used this software for over a year without any issues.

I am wondering if this is a false positive, I could not find any similar reports via Google.

The official site of KeyScrambler Personal is: http://www.qfxsoftware.com/ http://www.qfxsoftware.com/

Can anyone confirm whether or not this is a false positive? I am pretty certain it is -- Uninstall.exe has a file date of 07/18/2008, which is about when I last updated KeyScrambler.

Thanks

You can/should confirm false positives yourself. Upload the file in question to Jotti at http://virusscan.jotti.org/ on the Web or to VirusTotal at http://www.virustotal.com/ on the Web. Either service will provide a free scan of your file with multiple antivirus programs. If more than a couple of other AVs besides Clam find a file is infected, it probably is.

You can submit both infected files and false positive files to Clam at http://cgi.clamav.net/sendvirus.cgi on the Web. For false positives, be sure to insert the name of the false positive on the form and check the false positive box.

Regards,