FreddyB
Joined: 19 Jan 2012 |
Posts: 0 |
Location: Georgia |
|
 |
Posted: Thu Jan 19, 2012 5:52 pm |
|
 |
 |
 |
 |
This is strange. I assume this is a false positive and its ok to go into the quarantine folder and delete the setup file? I'm pretty much a newbie to Clamwin but I am using it on Server 2003 and until now its been a good alternative to Symantec for our non-profit
C:\Documents and Settings\All Users.WINDOWS\.clamwin\quarantine\cnet_clamwin-0_97_2-setup_exe.exe.infected: Adware.Downloader-207 FOUND
C:\Documents and Settings\All Users.WINDOWS\.clamwin\quarantine\cnet
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Thu Jan 19, 2012 8:50 pm |
|
 |
 |
 |
 |
That particular Clam signature has found a lot of adware, so it is a good signature, but there can still be false positive detections on a good signature. If you downloaded ClamWin from C-Net, you should be aware that they have lately inserted adware in some of their downloads. Times are tough, and a dollar for installing an adware toolbar with a download can be tempting. I suggest you download ClamWin from the official ClamWin web site and see if it is recognized then
You can always scan a file online with Jotti or Virus Total by uploading it to them. Either site will scan your file with multiple AV scanners, including Clam AV (the scan engine used by ClamWin). If several AVs see a file is infected, it is probably a real infection and not a false positive. I like to see at least 2 of these AVs verify an infection before I believe it: Avira Antivir, Bitdefender, Eset NOD32, Kaspersky, and Sophos.
If a file turns out to be a false positive detection, submit it to Clam AV starting at https://www.clamav.net/lang/en/sendvirus/ on the web. When you get to the submission form, change the submission type from "virus" to "false positive." Clam will adjust the signature within a few days.
If you are on a budget, look into the little Clam Sentinel program, which enables you to use ClamWin as a real-time scanner. It isn't too bad, and it is free. It is available from https://sourceforge.net/projects/clamsentinel/ on the web. If you decide to use it, be sure to read the Simple Guide first.
Regards,
|
|