ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Scan report: 7 infected files, Positive or False Positive?
hariskar


Joined: 04 Nov 2006
Posts: 0
Location: Greece/Kavala
Reply with quote
I just scanned drive C and here is the summary:
Which are the 7 infected files?
The 7 infected files are Positive or False Positive?
What should I do? Should I scan with an other AV?
Thank you!

----------- SCAN SUMMARY -----------

Known viruses: 1038821

Engine version: 0.97.2

Scanned directories: 18622

Scanned files: 96805

Infected files: 7



Data scanned: 17251.62 MB

Data read: 41786.80 MB (ratio 0.41:1)

Time: 2587.789 sec (43 m 7 s)



The following files are Digitally Signed by Microsoft Corporation and may have been incorrectly detected as viruses:

C:\Program Files\Microsoft Office\Office12\excelcnv.exe: [W32.Virut.Gen.D-163] FALSE POSITIVE FOUND

c:\users\hk\appdata\local\temp\clamav-9c0015ef023d4aa872b7b736b08079d4.000005bc.clamtmp: [W32.Virut.Gen.D-163] FALSE POSITIVE FOUND

Please do not be alarmed and help us by submitting the files identified above as FALSE POSITIVE at https://www.clamav.net/sendvirus/

--------------------------------------

Completed

--------------------------------------
View user's profileSend private message
Prince Serendip


Joined: 21 Sep 2011
Posts: 0
Location: Canada
Reply with quote
If you're unsure about any files detected by one program, then check them out using another. It's like getting a second opinion in medical stuff. Since having more than one virus scanner is not a good idea on a single computer, go to any of the free scanning web sites to check on suspicious findings. You can upload the files and have them checked by multiple engines at Jotti or Virus Total, or have your entire computer scanned at Eset Nod32 Free Online Scanner or TrendMicro's Housecall. This is especially important with system files.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
I see you have a Virut false positive. ClamWin will not quarantine/remove false positive system files now.

Is there a beginning part to the scan report that shows the 7 infected files? ClamWin will name any infected files it finds as it scans, and this information should be before the scan summary. If you have ClamWin set to quarantine (never set it to remove) the files are in your quarantine folder--go there to see them. If you have it set to report, I suggest you change it to quarantine, and do another scan and then find them in the quarantine folder. This is probably safe--it will not quarantine Microsoft/system files, and you can always restore false positives from quarantine with the quarantine browser now.

Seven infections in one scan is a bit large, so you may have a false positive there--especially if they all show the same infection.

Trend Micro's House Call is pretty good. Download it from their web site and put it on your desktop and then do a scan with it. You do not have to install it, and it updates before each scan. I recently told a friend about it, and she found 240 infections with it! It makes a good second scanner and will not use any resources unless you scan with it.

So that is what I would do: see if you can find out more from ClamWin and then do a scan with House Call. Get back here if you need more help.

Regards,
View user's profileSend private message
Scan report: 7 infected files, Positive or False Positive?
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic