ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Weird Virut detection
lordpake


Joined: 01 Mar 2009
Posts: 0
Reply with quote
I'm still getting one detection for Virut in Windows\Installer\ .msp-file.

Code:
C:\WINDOWS\Installer\130b13.msp: W32.Virut.Gen.D-163 FOUND


However, when scanned in Virustotal file is all clean (including Clam).

https://www.virustotal.com/analisis/88a5a080d7f92f1702dce498b1081f6e3df42d43a4d9c75d4f1f87f5787c69fc-1246383953


I did submit that file weeks ago to devs via ClamAV site. I do use ClamWin Portable (v0.95.2). Besides that, my machine is clean and secured by KIS 2009 / PrevX 3.0 + scanned occasionally with SAS / MBAM / Panda ARK.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
VirusTotal is still using Clam version 0.94.1. The virut detections became more sensitive with the functionality in Clam verson 0.95. I've been told by the VirusTotal operator that Clam doesn't provide him with new versions on a very timely basis. VirusTotal has Linux scanners, and with about 40 different scanning engines, it's kind of a pain for him to personally have to "babysit" each new installation.

Regards,
View user's profileSend private message
lordpake


Joined: 01 Mar 2009
Posts: 0
Reply with quote
Ok, that explains it then. Mean while, what should I do with that .msp file?
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
If the file is just a couple of megabytes, upload it to Clam at their submission site starting at https://www.clamav.net/sendvirus/ on the web. If it is rather large, you can upload it to Alch, and he will pass it on to Clam. I believe the location has been mentioned in a previous post or two in the forum. If you can't find it, give him a PM.

Regards,
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
Please check your PM
View user's profileSend private message
lordpake


Joined: 01 Mar 2009
Posts: 0
Reply with quote
File uploaded
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
thanks, it should be fixed soon
View user's profileSend private message
lordpake


Joined: 01 Mar 2009
Posts: 0
Reply with quote
After some weeks have passed, the detection still remains.

Granted it's not critical system file, however f/p is f/p
View user's profileSend private message
Weird Virut detection
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic