hariskar
Joined: 04 Nov 2006 |
Posts: 0 |
Location: Greece/Kavala |
|
 |
Posted: Tue Sep 20, 2011 2:16 pm |
|
 |
 |
 |
 |
I just scanned drive C and here is the summary:
Which are the 7 infected files?
The 7 infected files are Positive or False Positive?
What should I do? Should I scan with an other AV?
Thank you!
----------- SCAN SUMMARY -----------
Known viruses: 1038821
Engine version: 0.97.2
Scanned directories: 18622
Scanned files: 96805
Infected files: 7
Data scanned: 17251.62 MB
Data read: 41786.80 MB (ratio 0.41:1)
Time: 2587.789 sec (43 m 7 s)
The following files are Digitally Signed by Microsoft Corporation and may have been incorrectly detected as viruses:
C:\Program Files\Microsoft Office\Office12\excelcnv.exe: [W32.Virut.Gen.D-163] FALSE POSITIVE FOUND
c:\users\hk\appdata\local\temp\clamav-9c0015ef023d4aa872b7b736b08079d4.000005bc.clamtmp: [W32.Virut.Gen.D-163] FALSE POSITIVE FOUND
Please do not be alarmed and help us by submitting the files identified above as FALSE POSITIVE at https://www.clamav.net/sendvirus/
--------------------------------------
Completed
--------------------------------------
|
|
Prince Serendip
Joined: 21 Sep 2011 |
Posts: 0 |
Location: Canada |
|
 |
Posted: Wed Sep 21, 2011 5:54 am |
|
 |
 |
 |
 |
If you're unsure about any files detected by one program, then check them out using another. It's like getting a second opinion in medical stuff. Since having more than one virus scanner is not a good idea on a single computer, go to any of the free scanning web sites to check on suspicious findings. You can upload the files and have them checked by multiple engines at Jotti or Virus Total, or have your entire computer scanned at Eset Nod32 Free Online Scanner or TrendMicro's Housecall. This is especially important with system files.
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Wed Sep 21, 2011 12:18 pm |
|
 |
 |
 |
 |
I see you have a Virut false positive. ClamWin will not quarantine/remove false positive system files now.
Is there a beginning part to the scan report that shows the 7 infected files? ClamWin will name any infected files it finds as it scans, and this information should be before the scan summary. If you have ClamWin set to quarantine (never set it to remove) the files are in your quarantine folder--go there to see them. If you have it set to report, I suggest you change it to quarantine, and do another scan and then find them in the quarantine folder. This is probably safe--it will not quarantine Microsoft/system files, and you can always restore false positives from quarantine with the quarantine browser now.
Seven infections in one scan is a bit large, so you may have a false positive there--especially if they all show the same infection.
Trend Micro's House Call is pretty good. Download it from their web site and put it on your desktop and then do a scan with it. You do not have to install it, and it updates before each scan. I recently told a friend about it, and she found 240 infections with it! It makes a good second scanner and will not use any resources unless you scan with it.
So that is what I would do: see if you can find out more from ClamWin and then do a scan with House Call. Get back here if you need more help.
Regards,
|
|