ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Issue with virus scan
sivaguru


Joined: 13 May 2014
Posts: 2
Location: India
Reply with quote
Hi Support,

We are third party control developers, one of our customers reported that the clamwin antivirus software has detected some of our exe files as threats. We have checked in our side by checking with our source and we ensured that no issues from our side . Also we checked with latest version clam win Antivirus software, we are able to reproduce the reported issue.

Can you check this and update us the reason for detecting the below mentioned exe files as threats ?
[url=http://postimg.org/image/knizstkdf/][img]http://s21.postimg.org/knizstkdf/Virus_scan.jpg[/img][/url]
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4292
Location: USA
Reply with quote
ClamWin uses the scanning engine and virus signature database provided by the Clam AV project (now owned by Cisco). If any files are detected falsely as infected by ClamWin (false positives), you should report them to Clam AV so they can correct their signature. The Clam AV web page is at http://www.clamav.net/lang/en/ on the world wide web. From the menu options, select to report a file. Then be sure to select to report a false positive--do not select to submit a malware sample. Clam AV will correct their false positive signature manually, so it can take a few days. To speed things up, I suggest you also upload the file to Virus Total, and I think they will also submit the file to Clam AV, so there will be more people reporting the false positive. Until the false positive is corrected, you can whitelist the file(s) in ClamWin's configuration menu--Tools, Preferences, Filters, Exclude Matching Filenames.

Thank you for using ClamWin.

Regards,
View user's profileSend private message
sivaguru


Joined: 13 May 2014
Posts: 2
Location: India
Reply with quote
Hi Support,

Latest ClamWin Antivirus trial version reports some of our exe as threat while scanning. We have checked this in our end and we ensured that no issues from our side.

Shared those exe as zip file in below link.

http://www.filetolink.com/9908a89421

Can you check this and update us the reason for detecting the below mentioned exe files as threats ?

Thanks,
Sivaguru
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4292
Location: USA
Reply with quote
Did you not read this entire thread?


Earlier posts mention that ClamWin uses the scan engine and virus signatures provided by the Clam AV project. It says that you should contact Clam AV about false positive detections. It says that you should send Clam AV a copy of the false positive file via their normal false positive submission process. Also upload a copy of the file to Virus Total and scan it there.

If a file is detected as a Potentially Unwanted Program (PUP), Clam AV has a policy of not correcting false positive detections on PUPs because the PUP detection is an optional detection selected by the user.

Regards,
View user's profileSend private message
Issue with virus scan
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic