ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Clamwin detect false positive
wisely


Joined: 14 Aug 2008
Posts: 0
Location: Asia
Reply with quote
Clamwin detect a trojan at my PC

C:\Program Files\Spybot - Search & Destroy\unins000.exe: Trojan.Downloader-52290 FOUND

However, when I upload to the virusscan.org to verify. Other anti-virus programs cannot detect anything.

see result
https://virscan.org/report/c20b4a9d18ce66f15cf45d3c558728d9.html

Can someone please update the clamav virus database.
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Reply with quote
please submit it here:
https://cgi.clamav.net/sendvirus.cgi
View user's profileSend private message
wisely


Joined: 14 Aug 2008
Posts: 0
Location: Asia
Reply with quote
Thanks for the link.

I have post the file to the website.
View user's profileSend private message
Peter B.


Joined: 30 Aug 2008
Posts: 0
Reply with quote
For what it's worth, I found the same item in the same location/file yesterday early PM (CST).

I'm curious whether it was in fact a false positive.

I deleted the affected file.

Peter B.

-----
View user's profileSend private message
wisely


Joined: 14 Aug 2008
Posts: 0
Location: Asia
Reply with quote
Like I said, it seem like a false positive to me because no other virus scanners can detect anything.

https://virscan.org/report/c20b4a9d18ce66f15cf45d3c558728d9.html

If another virus scanner can detect it, I would delete it straight away without any doubt.

I just do not want to screw up my system by deleting every single "suspicious" file.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
In most cases, if up to four scanners find an infection, it could be a false positive. If five or more scanners find something, it's probably a real infection.

For the final word on a file, here's a free site from PC Tools' ThreatFire group that provides an excellent analysis: https://www.threatexpert.com/ on the web. It's better than running the software in your own virtual machine to see what a file does. Sunbelt Software has a similar service.

Regards,
View user's profileSend private message
wisely


Joined: 14 Aug 2008
Posts: 0
Location: Asia
Reply with quote
Clamwin developers have fixed the problem.
It no longer report the file as a virus.
View user's profileSend private message
Clamwin detect false positive
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic