ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Trojan.Patched-8 - wrong alert
eYeDOL


Joined: 30 Mar 2008
Posts: 0
Location: only 5 hops from u
Reply with quote
The new updated V-db seems to include a wrong alert. It was displayed as :
*** Scanning Programs in Computer Memory *** c:\windows\system32\sens.dll: Trojan.Patched-8 FOUND

I checked that file on www.virustotal.com
The analisis results :
No other of 32 virusscanner reports an virus, only ClamAV.

please take care
thanks in advance
eyedol
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Please upload a copy of the file with the false positive to Clam AV at https://cgi.clamav.net/sendvirus.cgi on the Web and tell them about it. They will change the signature database that both Clam and ClamWin use. There have been some false positives in systems files lately. That's why you should probably use the Report only option in General preferences instead of remove/quarantine, and uncheck the Scan Programs Loaded in Computer Memory box in Scheduled Scans. You don't want to lose your system because an important file is dumped from memory or placed in quarantine.

All antivirus programs get a false positive now and then. You can upload a file to Jotti or Virus total on the Web to verify an infection. If more than a couple of other scanners find an infection, it's probably not a false positive.

Regards,
View user's profileSend private message
Trojan.Patched-8 - wrong alert
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic