hi all,
ClamWin found this thing SysLib.sys in my system drive and labeled it Trojan.Nmust

I scan again wit all my weapons: AOL (KAV engine), MS Defender, Ad-aware, a-square, found nothing

i scan the file with virustotal online scanner, only CalmWin mark it as nasty.

i'm quite wondering is it false positive or its really trojan and all other scanner missed?

i quarantine the file meaning take it out of system, my laptop stil seems run well.

any suggestion,
thanx

It could be spyware - and some antivirus programs still don't bother much with spyware, so you might also check it with a good antispyware program like Lavasoft or SuperAntispyware, both of which have free versions.

You have already check the file with several antivirus progrmas. The VirusTotal Web site will check a file free with about 30 antivirus programs, including ClamWin. If ClamWin is the only antivirus that found something, it is probably a false positive, and you should let the ClamAV project know about it. Go to the ClamAV submission page at https://cgi.clamav.net/sendvirus.cgi to upload it there and tell them it is a false positive.

Regards,

thanx Bob,

but like i said, i scanned it wit lavasoft ad-aware, windows defender n a-square, later i also scan wit microsmart spyware begone, iobit advanced windows care but nothing found.

and i did scan it on virus total, nothing again except clamwin.

i send clamwin team email alr, hope receive from em soon.

i just scan wit updated-database clamwin n it stil falg the file as trojan.Nmust

Well, you have checked it out well, so if ClamWin is the only program calling it malware, then it is a false positive.

Regards,

Hi Bob,

altho iml a supporter of ClamWin, i feel ClamWin maks quite a lot false positives, more than other programs.

and i also know we cant expect too much from our ClamWin team since they develop a free program for us wit limited resources. But i feel they need 2 pay more attention on their false positive. i look thru forum and find dat some also found false positive but clamwin didnt correct it.

hwv, like i said, i stil support ClamWin.
Thanx.

ClamWin primarily provides a Windows graphical user interface to ClamAV. The ClamAV team is responsible for keeping up the virus signatures, as well as correcting false positives. They are doing a pretty good job, but we will need to tell them about false positives. After you tell them, I would give them five days or so and then follow up if it still comes up false--check it out with VirusTotal a couple of times.

A couple of months ago, ClamAV decided the important Winlogon file had a virus. It destroyed come computer systems--including mine. It happens. I've now configured ClamWin to notify me of a virus--instead of quarrantining.

Regards,