ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
trojan found by avast when updating clamwin virus database !
psmahe


Joined: 12 May 2009
Posts: 2
Reply with quote
hi,
first thanks for your work. i m writing this message cause this is the first time (today) updating virus database leads to message from avast of this type :
"trojan found
file name Very Happy:\Documents and Settings\All Users\.clamwin\db\clamav-3b97f371ab1378baa29aae6c9670ee2a.000009a0.clamtmp
malware name : JS:ScriptSH-inf [Trj]"
may i consider avast is wrong or is there really a problem ?
thanks
smahe
View user's profileSend private message
Budzed


Joined: 12 May 2009
Posts: 2
Reply with quote
I just started to get the same from Avast.

File name: C:\ProgramData\.clamwin\db\clamav-6f2edcd2f3fedd2eacfb930310a5ad4a.00001048.clamtmp
Malware name: JS:ScriptSH-inf [Trj]
Malware type: Trojan Horse
VPS Version: 090512-0, 12/05/2009

It happens every time I try and update ClamWin's virus datagbase although the file name seems to change as the last time
it was C:\ProgramData\.clamwin\db\clamav-4ea86a2c0ced038f99dbec4d3bc69856.000011e4.clamtmp

ClamWin's Downloading Update Report is:
ClamAV update process started at Tue May 12 11:39:58 2009
main.cld is up to date (version: 50, sigs: 500667, f-level: 38, builder: sven)
Downloading daily-9352.cdiff [100%]
Downloading daily-9353.cdiff [100%]
Downloading daily-9354.cdiff [100%]
ERROR: Can't parse new database C:\ProgramData\.clamwin\db/clamav-4ea86a2c0ced038f99dbec4d3bc69856.000011e4.clamtmp
LibClamAV Error: cl_cvdhead: Can't open file C:\ProgramData\.clamwin\db/clamav-4ea86a2c0ced038f99dbec4d3bc69856.000011e4.clamtmp

--------------------------------------
Completed
--------------------------------------

fwiw, I'm running the latest version of ClamWin Free Antivirus (0.95.1).
View user's profileSend private message
Budzed


Joined: 12 May 2009
Posts: 2
Reply with quote
After some Googling for "ScriptSH-inf [Trj]" (which I should really do earlier) I'm finding others have seen the same virus and initially it seems to be a problem with Avast and maybe a false positive. More reading necessary.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4292
Location: USA
Reply with quote
I don't think this is a virus. It looks like a MD5 file hash and not a real virus. You might try to delete the file and then see if you could exclude that ClamWin folder from Avast's scanning.

Regards,
View user's profileSend private message
psmahe


Joined: 12 May 2009
Posts: 2
Reply with quote
ok i've just seen your replies
thanks for your searches and knowledges
View user's profileSend private message
hc233


Joined: 12 May 2009
Posts: 2
Reply with quote
I didn't this to be a virus either so I told avast to "DO NOTHING" and it appeared to allow the update and I have sent a false positive report to AVAST. we shall see what happens.
View user's profileSend private message
RussZHC


Joined: 15 May 2009
Posts: 1
Reply with quote
As per budzed above;

ERROR: Can't parse new database C:\Documents and Settings\All Users\.clamwin\db/clamav-6fc0bc0b1b1f1c06bc519dd0c8c6642b.00000e0c.clamtmp
LibClamAV Error: cl_cvdhead: Can't open file C:\Documents and Settings\All Users\.clamwin\db/clamav-6fc0bc0b1b1f1c06bc519dd0c8c6642b.00000e0c.clamtmp

but in my case, AVAST! does not seem to "accept" my opinion that it is a false positive...what is odd, in my not computer saive mind, is that if I am in Hotmail (I seldom am) the warnings sound about every minute whereas in other web locations (gmail, google, youtube, etc etc) or in other apps (OoO etc) the warnings only sound about once a day, when Clamwin wants to update.

This originally started for me about May 12/09 as well but I had assumed until it started happening again today that it was my not using the most up-to-date version of Clamwin but it, the "alerts", have been happening more frequently since updating (May 14/09) Question
View user's profileSend private message
Avast and clamwin
billmoss


Joined: 14 May 2009
Posts: 1
Location: NY (USA)
Reply with quote
Scanned the directory .clamwin (all the files) with the latest version of a-squared free, spybot, avast from my Linux server, and clamav from my Linux server and no errors or malware were reported.
View user's profileSend private message
trojan found by avast when updating clamwin virus database !
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic