 | Clamwin detect false positive |  |
wisely
Joined: 14 Aug 2008 |
Posts: 0 |
Location: Asia |
|
 |
Posted: Sat Aug 30, 2008 4:32 am |
|
 |
 |
 |
 |
Clamwin detect a trojan at my PC
C:\Program Files\Spybot - Search & Destroy\unins000.exe: Trojan.Downloader-52290 FOUND
However, when I upload to the virusscan.org to verify. Other anti-virus programs cannot detect anything.
see result
https://virscan.org/report/c20b4a9d18ce66f15cf45d3c558728d9.html
Can someone please update the clamav virus database.
|
|
alch
Site Admin
Joined: 27 Nov 2005 |
Posts: 0 |
|
|
 |
Posted: Sat Aug 30, 2008 4:37 am |
|
 |
 |
 |
 |
please submit it here:
https://cgi.clamav.net/sendvirus.cgi
|
|
wisely
Joined: 14 Aug 2008 |
Posts: 0 |
Location: Asia |
|
 |
Posted: Sat Aug 30, 2008 5:33 am |
|
 |
 |
 |
 |
Thanks for the link.
I have post the file to the website.
|
|
Peter B.
Joined: 30 Aug 2008 |
Posts: 0 |
|
|
 |
Posted: Sat Aug 30, 2008 4:54 pm |
|
 |
 |
 |
 |
For what it's worth, I found the same item in the same location/file yesterday early PM (CST).
I'm curious whether it was in fact a false positive.
I deleted the affected file.
Peter B.
-----
|
|
wisely
Joined: 14 Aug 2008 |
Posts: 0 |
Location: Asia |
|
 |
Posted: Sun Aug 31, 2008 2:28 am |
|
 |
 |
 |
 |
Like I said, it seem like a false positive to me because no other virus scanners can detect anything.
https://virscan.org/report/c20b4a9d18ce66f15cf45d3c558728d9.html
If another virus scanner can detect it, I would delete it straight away without any doubt.
I just do not want to screw up my system by deleting every single "suspicious" file.
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Sun Aug 31, 2008 7:35 pm |
|
 |
 |
 |
 |
In most cases, if up to four scanners find an infection, it could be a false positive. If five or more scanners find something, it's probably a real infection.
For the final word on a file, here's a free site from PC Tools' ThreatFire group that provides an excellent analysis: https://www.threatexpert.com/ on the web. It's better than running the software in your own virtual machine to see what a file does. Sunbelt Software has a similar service.
Regards,
|
|
wisely
Joined: 14 Aug 2008 |
Posts: 0 |
Location: Asia |
|
 |
Posted: Mon Sep 01, 2008 12:47 pm |
|
 |
 |
 |
 |
Clamwin developers have fixed the problem.
It no longer report the file as a virus.
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by
phpBB © phpBB Group
Design by
phpBBStyles.com |
Styles Database.
Content © ClamWin Free Antivirus GNU GPL Free Software Open Source Virus Scanner. Free Windows Antivirus. Stay Virus Free with Free Software.