ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Some more False Positives?
dude_472


Joined: 06 Jun 2008
Posts: 0
Location: Wilkes-Barre PA
Reply with quote
These files are for Spybot and for the latest version of a Golf league manager program I have been using for 3 years. I believe they are clean (at least have not been identified on other PCs where I have these same files. Thanks!


Scan Started Tue Jun 03 16:42:02 2008
-------------------------------------------------------------------------------

*** Scanning Programs in Computer Memory ***


*** Scanned 28 processes - 439 modules ***
*** Computer Memory Scan Completed ***

C:\Documents and Settings\Nick\Desktop\spybotsd152.exe: Trojan.Dropper-7556 FOUND
C:\Documents and Settings\Nick\My Documents\Downloads\League Manager 2008\lm2008.exe: Trojan.Dropper-7556 FOUND

----------- SCAN SUMMARY -----------
Known viruses: 303728
Engine version: 0.93
Scanned directories: 4846
Scanned files: 53027
Infected files: 2
Data scanned: 11264.68 MB
Time: 4044.078 sec (67 m 24 s)
View user's profileSend private messageSend e-mail
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Yes, they probably are false positives, since you have two files and they both have a similar malware referenced. However, just in case they are not, you should verify one of them by uploading it to Jotti at https://virusscan.jotti.org/ on the Web where they will scan it for free with multiple antivirus programs. If no more than a couple of other AV programs spot something, it probably is a false positive.

When you gert a false positive, you should go to the Clam virus submission page at https://cgi.clamav.net/sendvirus.cgi on the Web. Fill out the submission form there and upload the file giving the false positive. Be sure to check the false positive block and tell them the name of the false virus/malware. That is the only way they will know to delete/change the signature, and you will be doing your part to help improve Clam/ClamWin.

Clam checks every signature for false positives against a sample of "safe" programs before it is released; however, the sample does not contain every program there is, and malware often acts similar to many "good" programs.

Regards,
View user's profileSend private message
Some more False Positives?
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic