ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
trojan.genericff
dos5


Joined: 09 Jun 2011
Posts: 0
Reply with quote
just so you know...........

I have two identical operating systems, servicepacks, etc, It is xp pro sp3......... very fast and secure.... mine anyway..

the other has these trojans while mine does not, both are using clamwin. so are we sure that the false positive is real???

just thought I should mention this.
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Are both computers using the same version of ClamWin? That particular signature has been known to trigger a false positive--especially on computers that are using a version of ClamWin prior to the latest version-.97. If the detection is on an older version, it is likely a false positive. If it is on version .97, it is probably a real detection, but I would upload one of the detected files to Jotti or Virus Total on the web to see what they say.

With each new version of Clam AV, from which ClamWin is ported over to Windows, Clam has some enhanced signatures. Older versions can't completely read the enhanced signatures and may only process them partially--thus triggering false positives when they see the signature without being able to interpret when the signature is to be applied.

This is not a surefire method to tell a false positive, but I usually like to see at least 2 of these AVs on Jotti/Virus Total detect a virus before I believe it: AntiVir, Bitdefender, Kaspersky, NOD32, and Sophos.

Regards,
View user's profileSend private message
trojan.genericff
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic