March 20, 2019, Wednesday



FOUND - what does this mean??

(below is the file location of what I have seen,

is there a virus form this game on my pc form Warface?
or is it protecting my pc, just thought to drop you guys a line to see what you might think.


FOUND: ??
C:\Program Files (x86)\Steam\steamapps\common\Warface\GameCenter\Chrome\3.3538.1848\libcef.dll: Win.Trojan.Virut-375 FOUND

C:\Program Files (x86)\Steam\steamapps\common\Warface\Warface\Bin32Release\mrac.dll: Win.Trojan.Virut-226 FOUND

Again thanks

[/b]

Games are a favorite hiding place for many viruses. However, I suggest you upload the file to Virus Total at https://www.virustotal.com/#/home/upload on the web to see what other AVs say about the file. ClamWin uses the scanning engine/database from Clam AV, so if Clam Av is the only Av on Virus Total spotting the file as being malicious, it is a "false positive" detection and not a real virus. In that case, Virus Total will tell Clam Av about the false detection so Clam Av can change its virus signature. It would not hurt for you to also upload the file to Clam Av at https://www.clamav.net/contact on the web to speed up the correction by Clam AV. It might be a week or so before Clam gets around to correcting their signature, so you should probably "whitelist" the file so ClamWin will bypass detecting it. You can whitelist a file via menu item(s) Configure, Filters, Exclude Matching Filenames--just copy the location (drive, folder, filename) in Exclude Matching Filenames. See the ClamWin Help files or contact us if you have any problems whitelisting. After a week or so, you should be able to remove the whitelisted file from ClamWin because Clam AV should have corrected their signature by then.

Virut is kind of an old virus, and Clam AV has had lots of false positive detections of it in the past, so most likely this is a false detection.

Thanks for using ClamWin! Remember to use it only as a backup scanner to a real-time Av.

Regards,