ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Increased False Positives since updating to 0.95
feeks


Joined: 07 Apr 2009
Posts: 0
Location: Australia
Reply with quote
Hi

I have been running ClamWin for a about a month now Very Happy and have been schedule scanning 5 volumes twice a day without any real issues in terms of finding viruses. I updated to 0.95 and since then have been getting the following:-

C:\Program Files\Business Objects\Common\2.8\managed\CrystalDecisions.VSDesigner.dll: Trojan.Swizzor.Gen FOUND
G:\qdownload\Other\MassiveSoft\compatibilitypacksp1-kb940289-fullfile-en-us.exe: W32.Virut.Gen.D-163 FOUND
G:\qdownload\Other\MassiveSoft\FileFormatConverters.exe: W32.Virut.Gen.D-163 FOUND

Submitting to Jotti finds no problems although I am still scanning fully through this process. These files have been scanned via Panda and feel confident that they are clean!

Having run ClamWin 0.94 across these files previously is there an issue under 0.95 given the update notice of an improvement in False Positives detection, is anyone else seeing this?
Having started to submit the False Positive reports for the first time how can I white list the files and return them to their rightful places without 0.95 seeing the same issue?
I have read the rename and return comments from the forum and don't have a problem with the process but obviously returning under the current circumstances will produce the same finds or do I need to wait until False Positive confirmation from Clam.net before taking action?

Very Happy
View user's profileSend private message
feeks


Joined: 07 Apr 2009
Posts: 0
Location: Australia
Reply with quote
I have returned and white listed pending the False Positive confirmation.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
I have noticed these false positives since version .95. During some of the Clam beta testing, it was mentioned that a few detections were more "hair trigger" under version .95; however, overall, detection was improved. I guess this is due to the changes they made to the scanning engine. All we can do is continue to report a detection to Clam if we are sure it is a false positive.

Regards,
View user's profileSend private message
feeks


Joined: 07 Apr 2009
Posts: 0
Location: Australia
Reply with quote
Thanks

I appreciate the comments.
View user's profileSend private message
Increased False Positives since updating to 0.95
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic