claypigeon723
Joined: 26 Jan 2010 |
Posts: 0 |
Location: Sebring, FL |
|
 |
Posted: Tue Jan 26, 2010 2:33 am |
|
 |
 |
 |
 |
I use a remote access program called TeamViewer 5. Its been an excellent program for transferring files and aiding friends by accessing their computers directly. A ClamWin scan today came up with this message:
"TeamViewer_Setup.exe: Trojan.Agent-131479 FOUND
What is this Trojan.Agent-131479 do? The TeamViewer program was downloaded directly from the TeamViewer Web Site. Is this something I should worry about?
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Tue Jan 26, 2010 3:40 am |
|
 |
 |
 |
 |
You can verify whether or not a file is infected by uploading it to either the Jotti or VirusTotal sites on the web. Either service will scan it with multiple antiviruses, including ClamAV, which furnishes the scanning engine/signatures for ClamWin. You can also upload a file to the Threat Expert service, which will run the file on their virutual machines and give you an email report, including a threat rating, a list of registry entries, and communication attempts. If several other AVs on Jotti/VirusTotal besides Clam find an infection, it is probably a real infection, and you should remove the file from your computer. If ThreatExpert finds malware, you can believe it.
You should keep ClamWin's infected files option set to Report only. If you have it set to Quarantine/Remove and have a false positive on a system file, you will lose access to your system if it is quarantined/removed.
Regards,
|
|