wisely
Joined: 14 Aug 2008 |
Posts: 0 |
Location: Asia |
|
 |
Posted: Sat Aug 30, 2008 4:32 am |
|
 |
 |
 |
 |
Clamwin detect a trojan at my PC
C:\Program Files\Spybot - Search & Destroy\unins000.exe: Trojan.Downloader-52290 FOUND
However, when I upload to the virusscan.org to verify. Other anti-virus programs cannot detect anything.
see result
https://virscan.org/report/c20b4a9d18ce66f15cf45d3c558728d9.html
Can someone please update the clamav virus database.
|
|
alch
Site Admin
Joined: 27 Nov 2005 |
Posts: 0 |
|
|
 |
Posted: Sat Aug 30, 2008 4:37 am |
|
 |
 |
 |
 |
please submit it here:
https://cgi.clamav.net/sendvirus.cgi
|
|
wisely
Joined: 14 Aug 2008 |
Posts: 0 |
Location: Asia |
|
 |
Posted: Sat Aug 30, 2008 5:33 am |
|
 |
 |
 |
 |
Thanks for the link.
I have post the file to the website.
|
|
Peter B.
Joined: 30 Aug 2008 |
Posts: 0 |
|
|
 |
Posted: Sat Aug 30, 2008 4:54 pm |
|
 |
 |
 |
 |
For what it's worth, I found the same item in the same location/file yesterday early PM (CST).
I'm curious whether it was in fact a false positive.
I deleted the affected file.
Peter B.
-----
|
|
wisely
Joined: 14 Aug 2008 |
Posts: 0 |
Location: Asia |
|
 |
Posted: Sun Aug 31, 2008 2:28 am |
|
 |
 |
 |
 |
Like I said, it seem like a false positive to me because no other virus scanners can detect anything.
https://virscan.org/report/c20b4a9d18ce66f15cf45d3c558728d9.html
If another virus scanner can detect it, I would delete it straight away without any doubt.
I just do not want to screw up my system by deleting every single "suspicious" file.
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Sun Aug 31, 2008 7:35 pm |
|
 |
 |
 |
 |
In most cases, if up to four scanners find an infection, it could be a false positive. If five or more scanners find something, it's probably a real infection.
For the final word on a file, here's a free site from PC Tools' ThreatFire group that provides an excellent analysis: https://www.threatexpert.com/ on the web. It's better than running the software in your own virtual machine to see what a file does. Sunbelt Software has a similar service.
Regards,
|
|
wisely
Joined: 14 Aug 2008 |
Posts: 0 |
Location: Asia |
|
 |
Posted: Mon Sep 01, 2008 12:47 pm |
|
 |
 |
 |
 |
Clamwin developers have fixed the problem.
It no longer report the file as a virus.
|
|