ClamWin Free Antivirus :: View topic - I've got a couple of possible false positives.

Posted: Fri Feb 03, 2006 3:11 pm

I just completed a scan with clamwin 0.88 and it found two infected files that no other virus scanner has ever found. I'm pretty suspicious that one of both are false positives.

The files in question are kazaalite.kpp from "kazaalite k++ ver 2.4.3". I googled and found that this file is mentioned as a false positive at the following forum : https://www.beatking.com/forums/index.php?showtopic=14183&st=0 https://www.beatking.com/forums/index.php?showtopic=14183&st=0

The other files is amokplaylistcopy.exe version 1.1. It's from a freeware playlist manager as seen at this link https://www.topshareware.com/AmoK-Playlist-Copy-download-16277.htm https://www.topshareware.com/AmoK-Playlist-Copy-download-16277.htm

BTW. I've had both of these files on my computer for some time now and neither of them has appeared to cause any problems. I make regular offline virus scans with f-prot (with up to date definitions) and neither file has ever been flagged as a problem before.

Posted: Fri Feb 03, 2006 3:15 pm

BTW here's the log.

Code:

--------------------------------------

Scan started: Fri Feb 3 23:55:15 2006

ERROR: Can't open file C:\WINDOWS\system32\config\SAM

ERROR: Can't open file C:\WINDOWS\system32\config\SECURITY

ERROR: Can't open file C:\WINDOWS\system32\config\SOFTWARE

ERROR: Can't open file C:\WINDOWS\system32\config\SYSTEM

ERROR: Can't open file C:\WINDOWS\system32\config\DEFAULT

C:\Program Files\AmoK Playlist Copy\amokplaylistcopy.exe: Trojan.Downloader.Small-1004 FOUND

C:\Program Files\Kazaa Lite K++\KazaaLite.kpp: Worm.Bagle.BB-gen FOUND

-- summary --

Known viruses: 43960

Engine version: 0.88

Scanned directories: 2144

Scanned files: 18671

Infected files: 2

Data scanned: 2822.22 MB

Time: 778.320 sec (12 m 58 s)

-------------------

Completed

-------------------

Posted: Fri Feb 03, 2006 3:41 pm

please read this FAQ:
https://www.clamwin.com/content/view/40/27/