 | Trojan.Patched-8 - wrong alert |  |
eYeDOL
Joined: 30 Mar 2008 |
Posts: 0 |
Location: only 5 hops from u |
|
 |
Posted: Sun Mar 30, 2008 11:13 am |
|
 |
 |
 |
 |
The new updated V-db seems to include a wrong alert. It was displayed as :
*** Scanning Programs in Computer Memory *** c:\windows\system32\sens.dll: Trojan.Patched-8 FOUND
I checked that file on www.virustotal.com
The analisis results :
No other of 32 virusscanner reports an virus, only ClamAV.
please take care
thanks in advance
eyedol
|
|
 |
 | |  |
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Sun Mar 30, 2008 12:14 pm |
|
 |
 |
 |
 |
Please upload a copy of the file with the false positive to Clam AV at https://cgi.clamav.net/sendvirus.cgi on the Web and tell them about it. They will change the signature database that both Clam and ClamWin use. There have been some false positives in systems files lately. That's why you should probably use the Report only option in General preferences instead of remove/quarantine, and uncheck the Scan Programs Loaded in Computer Memory box in Scheduled Scans. You don't want to lose your system because an important file is dumped from memory or placed in quarantine.
All antivirus programs get a false positive now and then. You can upload a file to Jotti or Virus total on the Web to verify an infection. If more than a couple of other scanners find an infection, it's probably not a false positive.
Regards,
|
|
 |
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by
phpBB © phpBB Group
Design by
phpBBStyles.com |
Styles Database.
Content © ClamWin Free Antivirus GNU GPL Free Software Open Source Virus Scanner. Free Windows Antivirus. Stay Virus Free with Free Software.