![]() |
| False positive??? |
|
GuitarBob
|
The Virut Generic signatures sometimes give a false positive on some Microsoft files, so this could well be a false positive. To verify it, you can upload a copy of the file to Jotti at https://virusscan.jotti.org/en or to VirusTotal at https://www.virustotal.com/ on the web. Either service will scan the file for you with multiple AV programs (including Clam AV, which furnishes the scan engine/database for ClamWin). If more than two or three AVs find an infection, it is probably a real infection and not a false positive. I would believe an infection if the detecting AVs include a couple of these: Kaspersky, McAfee, Microsoft, Nod32, Symantec, or Trend Micro. You should upload false positive files to Clam AV at https://www.clamav.net/sendvirus/ on the web. When you get to the upload page, be sure to tell them the name of the virus that is falsely identified and the results of your Jotti/VirusTotal scan.
An alternative to verifying a false positive is to upload the file to Threat Expert at https://www.threatexpert.com/submit.aspx on the web. They will "run" the file and give you an email report, which includes a threat estimate. If you look at the date of your file in Windows Explorer, you can see when the file is dated. If the date is not recent, it is probably a false positive detection. Regards, |
||||||||||||
|
|
|||||||||||||
| False positive??? |
|
||
|
Powered by phpBB © phpBB Group
Design by phpBBStyles.com | Styles Database.
Content © ClamWin Free Antivirus GNU GPL Free Software Open Source Virus Scanner. Free Windows Antivirus. Stay Virus Free with Free Software.
Design by phpBBStyles.com | Styles Database.
Content © ClamWin Free Antivirus GNU GPL Free Software Open Source Virus Scanner. Free Windows Antivirus. Stay Virus Free with Free Software.


