Hi,

I have a feeling this may be a false positive, but the MIRO installer is infected with "FakeAV-103" according to ClamWin. I downloaded the program from here:

https://ftp.osuosl.org/pub/pculture.org/miro/win/Miro_Installer.exe

This has already been reported to Clam, and they are looking into it.

Regards,

I've received a miro installer on a collection disk, no idea what the version is, the file date is Feb18, 2011. ClamWin reports:
Adware.Searchbar-33 FOUND

I also think this is a false positive, however, I'm not game enough to try it out.

You don't have to run something to see if it is a virus. Upload the file to Virus Total or Jotti and they will scan it with 43 and 20 AV programs, respectively. Virus Total is at https://www.virustotal.com/ and Jotti is at https://virusscan.jotti.org/en on the web. If several AVs see an infection, it is probably not a false positive. I like to see at least 2 of these AVs verify something: Avira AntiVir, Bitdefender, Kaspersky, NOD32, or Sophos.

Undetected viruses and false positive files (files--not scan reports) should be reported to Clam AV at
https://www.clamav.net/lang/en/sendvirus/ on the web. Change the type to "false positive" if that is the case.

Many viruses now come with an installer, and a virus can use some of the same code as a legit installer..

Regards,

Thanks Bob,

Maybe I should've mentioned it as I've already tried that. However, the installer is larger than 30MB and VirusTotal only handles files up to 20MB in size.

Thanks anyway.

That makes a difference! If you have trouble uploading it to Clam AV, send email to luca@clamav.net.

Regards,

Will do, thanks again Bob.