rudy
Joined: 12 May 2010 |
Posts: 0 |
|
|
 |
Posted: Wed May 12, 2010 12:37 pm |
|
 |
 |
 |
 |
Hello,
On my system ClamWin recognized as file from Popcon Exchange POP3 connector (https://www.christensen-software.de/popcon.htm) as a virus
C:\Programme\POPcon\AV\una\scankrnl.xdll: Sentinel.5 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 771491
Engine version: 0.96
Scanned directories: 7411
Scanned files: 42140
Infected files: 1
I don't think (hope) this is correct.
Thank you for your help
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Wed May 12, 2010 3:32 pm |
|
 |
 |
 |
 |
Can you look at the Proterties of the file and see when it was installed/modified? If there has been no recent change, it is probably a false positive. Upload the file to VirusTotal at https://www.virustotal.com/ on the web to see how many antivirus programs find it infected. If only a few do, then it is likely a false positive. If several other AVs besides Clam find it infected, you can probably believe it. I like to see at least 5 AVs confirm an infection. I also like to see a couple of these AVs included among the detectors: Avast, Bitdefender, Kaspersky, Nod32, or Sophos.
If it is a false positive, upload it to Clam AV starting at https://www.clamav.net/lang/en/sendvirus/ on the web. Choose the False Positive description, and tell them the exact name of the falsely detected virus in the comments/description section. They will correct the signature, and ClamWin users will benefit.
Regards,
|
|