|
guitarpat
| Joined: 23 Apr 2012 |
| Posts: 0 |
|
|
|
 Posted: Tue May 28, 2013 9:48 am |
|
 |
 |
|
|
I have uploaded to virustotal and jotti but only clamwin shows this as a virus . Is it a false positive ?
C:\Windows\Temp\rap128888\RapportSetup-Full.msi: Win.Trojan.Katusha-221 FOUND
brgds
|
|
|
|
GuitarBob
| Joined: 09 Jul 2006 |
| Posts: 9 |
| Location: USA |
|
|
| Posted: Tue May 28, 2013 12:52 pm |
|
|
|
|
|
Yes, it is very likely a false positive if the Clam AV scan engine used by ClamWin is the only AV that detects it on Jotti or Vrus Total. Also, if the file has previously been on your computer for some time without any changes but is now being detected, that is also an indication of a false positive detection. Please upload the file to Clam AV so they can correct their signature. I use these AVs as my "triggers": AntiVir, Bit Defender, Nod 32, Kaspersky, and Sophos. If 2 of them detect a file, I will believe it. If the file is a non-Windows PE file (like html, doc, js, swf, etc.), I will believe it if only 1 of them detects it because AVs do not do as well at detecting malware in non-PE files.
Regards,
|
|
|
