thingjump2
Joined: 18 Dec 2009 |
Posts: 0 |
|
|
 |
Posted: Fri Dec 18, 2009 12:37 am |
|
 |
 |
 |
 |
Downloaded directly from flock.com, Clam insists there's a trojan here.
https://www.virustotal.com/analisis/bdc9810851d0ffeb5f59212123c921654079a569c1726fb0a2bae9801e0f1e2e-1261069065 Virus Total analysis is by no means unanimous. False positive?
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Fri Dec 18, 2009 1:49 am |
|
 |
 |
 |
 |
I like to see at least 5 AVs spot an iinfected file, but that isn't enough on ViruslTotal. When you aren't sure, look at the names of the AVs. McAfee, Microsoft, Symantec, and Trend are high-profile AVs that have a lot of corporate users, and they can't afford to be wrong too often. If a couple of them spot an infection, it's probably for real. If none of them spot it, it may be a false positive. In this case, none of them spot anything, so I'd say it is a false positive.
For a definitive answer, you can upload a file to Threat Expert (from PC Tools' Threatfie people) at https://www.threatexpert.com/submit.aspx on the web. They will run the file for you and send a report to your email address. The report will give a threat ranking, tell what the file does, and where it was probably developed. If there is no threat ranking, despite what the file does, it is probably not infected.
Regards,
|
|