ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Possible False Positive -- Please confirm?
oshjay


Joined: 07 Nov 2008
Posts: 1
Reply with quote
After a recent definition file update, ClamWin reported the following virus/trojan found:

- "C:\Program Files\KeyScrambler\Uninstall.exe: Trojan.Zlob-10486 FOUND"

I am using the free version of KeyScrambler ("Personal" edition) from QFX Software. I've used this software for over a year without any issues.

I am wondering if this is a false positive, I could not find any similar reports via Google.

The official site of KeyScrambler Personal is: http://www.qfxsoftware.com/ http://www.qfxsoftware.com/

Can anyone confirm whether or not this is a false positive? I am pretty certain it is -- Uninstall.exe has a file date of 07/18/2008, which is about when I last updated KeyScrambler.

Thanks
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4370
Location: USA
Reply with quote
You can/should confirm false positives yourself. Upload the file in question to Jotti at http://virusscan.jotti.org/ on the Web or to VirusTotal at http://www.virustotal.com/ on the Web. Either service will provide a free scan of your file with multiple antivirus programs. If more than a couple of other AVs besides Clam find a file is infected, it probably is.

You can submit both infected files and false positive files to Clam at http://cgi.clamav.net/sendvirus.cgi on the Web. For false positives, be sure to insert the name of the false positive on the form and check the false positive box.

Regards,
View user's profileSend private message
Possible False Positive -- Please confirm?
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic