ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Could someone check my Log File
spazzer


Joined: 27 Jun 2008
Posts: 0
Reply with quote
Scan Started Fri Jun 27 17:46:45 2008

-------------------------------------------------------------------------------


Hi can anyone help me these Trojans


C:\Program Files\Microsoft Works\lnchtour.exe: Trojan.Banload.OWJ FOUND

C:\Windows\ACER\Install_Flash_Player_9_AX_9.0.28.0.exe: Trojan.Downloader-42037 FOUND



--------------------------------------

Completed


Thanks,
Spazzer

--------------------------------------
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
check these files online at https://www.virustotal.com and if no other scanners identify them as infetcted then these are false positives. See this thread for more info:
https://forums.clamwin.com/viewtopic.php?p=7810
View user's profileSend private message
I have these results after submitting files !
spazzer


Joined: 27 Jun 2008
Posts: 0
Reply with quote
Can I insert a file or screen shot on the forum to show the results ?[/list]
View user's profileSend private message
I have submitted the files and have results ,can anyone help
spazzer


Joined: 27 Jun 2008
Posts: 0
Reply with quote
One of the files submitted is clear apart from F-Secure who have it as Trojan:W32/Agent.EKG
The other file submitted is flagged on 4 counts ClamWinAV say its Trojan.Banload.OWJ ,The Hacker say its Trojan/Agent.mbb, VBA32 say its Trojan.Win32.Agent.mbb and Webwasher Gateway call it Worm.Win32.Malware.Gen (suspicious) can anyone tell me what these all mean and what I should do if anything ???

Thanks for help Very Happy
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Each antivirus company generally has their own name for a virus/malware. If several other AVs on the Virus Total or Jotti scaning services also spot malware in a file in addition to ClamWin, it is probably a real infection and not a false positive. In that case, you should delete the infected file. If you have configured ClamWin to Notify you of infections, then you can use Windows Explorer to go to the file on your computer and manually delete it. If you have configured ClamWin to Quarantine infected files, you can safely go to the Clamwin quarantine folder and manually delete the file there with Windows Explorer. The General Preferences page in ClamWin's preferences shows the location of the Quarantine folder.

Regards,
View user's profileSend private message
Could someone check my Log File
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic