ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
FALSE POSITIVE
samandrew


Joined: 16 Dec 2017
Posts: 0
Reply with quote
There are 3 FALSE POSITIVE:



[1] C:\Program Files (x86)\ControlCenter4\BrCcLChn.dll: Win.Trojan.Ramnit-7471 FOUND
[2] C:\Program Files (x86)\Avira\Antivirus\aeoffice.dll: Rtf.Downloader.CVE_2017_8759-6336326-2 FOUND
[3] C:\Program Files (x86)\Avira\Antivirus\FAILSAFE\aeoffice.dll: Rtf.Downloader.CVE_2017_8759-6336326-2 FOUND


Due to www.virustotal.com ClamAV is the only virus scanner that detects those three files as infected.

[1] One engine detected this file
SHA-256 e443975321d9947815a4a9957b6306f949e3709d8e2e1efda767fb27a9b991fe
File name BrCtrlCntrLang
File size 72 KB
Last analysis 2017-11-14 12:51:01 UTC
Community score +33
ClamAV Win.Trojan.Ramnit-7471


[2] One engine detected this file
SHA-256 0d0bdb372be90da8e7d6b09af5a853a3a74921945e6f3b7dbf9986a77def1036
File name aeoffice.dll
File size 649.86 KB
Last analysis 2017-12-16 02:36:50 UTC
ClamAV Rtf.Downloader.CVE_2017_8759-6336326-2


[3] See [2]

Thank you for fixing and your valueable service! Smile
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Virus Total sends copies of files that are falsely detected to the AV companies that detect them. However, Clam AV (ClamWin use the Clam AV scan engine and virus signatures) is slow in correcting their signatures so they are not falsely detected, so I suggest you also send a copy of each falsely detected file to Clam AV at https://www.clamav.net/contact on the web to perhaps speed things up. Be sure to click the False Positive link instead of the link to Report A Suspicious File.

Remember to use a real-time AV as primary AV on your computer and use ClamWin as a backup scanner.

Regards,
View user's profileSend private message
FALSE POSITIVE
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic