kc14914
Joined: 04 Nov 2021 |
Posts: 1 |
|
|
 |
Posted: Thu Nov 04, 2021 3:50 pm |
|
 |
 |
 |
 |
I am getting a response in Clamwin that is not being recognized in other virus detectors. Clamwin shows it removed and then it is again removed in the next running. Is this a problem.
C:\ProgramData\Apple\Installer cache\Icloud control panel 7.9.0.9\Setupadmin.exe:\Win.malware.Phorpiez - 7145044 - 2
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 4937 |
Location: USA |
|
 |
Posted: Thu Nov 04, 2021 7:47 pm |
|
 |
 |
 |
 |
Upload the file to Virus Total and see what about 60 or so other AVs say about (including Clam AV, whose source code is ported by the ClamWin developers from Linux to Windows so we can use it). If other AVs (or only a couple of them) don't see anything malicious in the file, it is most certainly a false positive, and you will need to exclude the file from future ClamWin scans via the ClamWin GUI menu.
Clam/ClamWin gives more false positives than most AVs. Thankfully, the ClamWin developers put in a false positive module that prevents important system files from being falsely detected and quarantined.
Regards,
|
|