ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
MSMSGIN.EXE Infected With W.32.Vimes - 5 False Alarm?
fineleric


Joined: 25 Apr 2018
Posts: 1
Location: Ha Noi
Reply with quote
Hello,

MSMSGIN.EXE (size 17 KB, Date Modified 8/1/2001 10:58 PM) is reported by CalmWin as infected with W.32.Vimes-5. Microsoft Security Essentials has been running and reported no issue. Re-scan with Microsoft Security Essentials still does not flag a problem.

ClamAV version is 0.93.1
Virus DB Version: (Main:52; Daily: 10601) Updated 18:42 19 Mar, 2010

Is this a false alert?

Finel
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4359
Location: USA
Reply with quote
Check the file on Virus Total. If Clam AV (the engine used by ClamWin) detects it but no other AVs (or only a couple of other AVs detect it), then it is a false positive. I like to see at least 2 of these AVs detect a file before I believe it is infected: Avira, Bitdefender, Eset Nod 32, Kaspersky, and Sophos.

Virus Total should notify the affected AV in case of a false positive, but sometimes it either does not or the AV does nothing about it to correct their signature. It might take Clam AV several days to correct their signature, if at all. It might help if you upload the file to Clam AV via https://www.clamav.net/contact on the web. Be sure to select the False Positive link. You can whitelist/exclude a file from ClamWin scans via Tools, Preferences, Filters, Exclude Matching Filenames. You can read the ClamWin help/documentation files for more information.

Thanks for using ClamWin!

Regards,
View user's profileSend private message
MSMSGIN.EXE Infected With W.32.Vimes - 5 False Alarm?
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic