ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Possible False Positive?

Joined: 05 Apr 2017
Posts: 1
Location: california
Reply with quote
Clamwin found this:

C:\Users\All Users\VMware\VMware Workstation\Uninstaller\deleter.exe: Win.Worm.Runouce-1035 FOUND

I am thinking this is a false positive-What say you?

mary Confused
View user's profileSend private message

Joined: 09 Jul 2006
Posts: 4392
Location: USA
Reply with quote
I haven't seen many viruses/malware that run once. To be on the safe side, however, upload the file to Virus Total at on the web and see what about 60 AVs say about it. I like to see at least 2 of these AVs detect something before I believe it: Avira, Bitdefender, Eset Nod 32, Kaspersky, and Sophos.

An advantage of scanning a file on Virus Total is that if it is a false positive (erroneous detection), Virus Total will notify the detecting AV so they can fix it. In our case, ClamWin uses the scan engine and virus signatures of Clam AV, and it might take Clam AV a while to get around to fixing it--a consequence of a free AV that only has people working on it in their spare time.

Thanks for using ClamWin!
View user's profileSend private message
Possible False Positive?
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

 Reply to topic