ClamWin Free Antivirus :: View topic - Adobe Reader 6.0\ENUBIG\Data1.cab: Trojan.Agent-126462 FOUND

Posted: Wed Oct 28, 2009 2:16 pm

Hi,
My colleague is getting a virus report after a scan. We've run Trend Micro Housecall v7 but nothing is detected. Can anyone tell us if this is a 'false positive'?

Thank you
Tony

.
.
.
C:\WINDOWS\Cache\Adobe Reader 6.0\ENUBIG\Data1.cab: Trojan.Agent-126462 FOUND
.
.
.
----------- SCAN SUMMARY -----------
Known viruses: 636994
Engine version: 0.95.2
Scanned directories: 7891
Scanned files: 77744
Infected files: 1
Data scanned: 25381.48 MB
Data read: 21058.77 MB (ratio 1.21:1)
Time: 12889.022 sec (214 m 49 s)

Posted: Wed Oct 28, 2009 2:32 pm

i wouldn't trust only 1 or 2 AVs. suggest you upload the file to jotti or virus total and see what their multiple scanners say. if multiple AVs don't see anything, then it's a false positive, and you can tell clam about it. i like to see at least 5 AVs confirm an infection.

regards,

Posted: Wed Oct 28, 2009 2:36 pm

Thanks GuitarBob, I'll get on to it Wink

Posted: Fri Oct 30, 2009 12:51 am

Got the same issue starting yesterday. I'm guessing this is a false positive.

Posted: Fri Oct 30, 2009 9:26 am

I've tried 2 other scanners so far but it hasn't picked it up... I want to try a couple more as soon as I get time...

d_w_scott: have you tried with another scanner?

Posted: Fri Oct 30, 2009 3:06 pm

Just for info, I have now run Norton, F-Secure & Trend Housecall online scanners and nothing detected on this one. Also checked on a computer running the full Trend AV scanner.

Couldn't test with Jotti, Virus Total or Kaspersky online scanners because the suspect file is too big.

Posted: Fri Oct 30, 2009 4:31 pm

Submission has been made to Clamwin

Posted: Fri Nov 06, 2009 2:49 am

Virus Total shows no positives except through ClamAV

loftcat wrote:

I've tried 2 other scanners so far but it hasn't picked it up... I want to try a couple more as soon as I get time...

d_w_scott: have you tried with another scanner?