ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Clamwin Identifies Realtek Driver & Intel Network as a V
Fozzie Bear


Joined: 06 Mar 2013
Posts: 0
Location: UK
Reply with quote
Has anyone experienced this issue. Clamwin has recently done a full scan of my win7 home server and warned of viruses found during the scan. This is the relevant section of the log
C:\Vista\Vista\AERTACap.dll: Win.Trojan.Fakesmoke-102 FOUND
C:\Vista\Vista\AERTARen.dll: Win.Trojan.Fakesmoke-103 FOUND

C:\Intel_GLAN\PRO1000\Win32\NDIS5x\e1e5132.sys: Win.Trojan.Agent-170411 FOUND
C:\Intel_GLAN\PRO1000\Win32\NDIS5x\e1y5132.sys: Win.Trojan.Agent-170446 FOUND

Do you think this is a false identification? The drivers have been installed since the system was built and I dont remember clamwin reporting this as a problem before.
Fozzie
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
This could very well be a false positive detection. The way Clam does their automated signatures sometimes results in some false positives on Windows system files. I see at least one almost every day. The best way to verify a false positive is to upload it to either the Jotti or Virus Total scanning services, where they will scan a file with multiple AVs, including the Clam Engine used by ClamWin. If a couple of quality AVs detect something, it is probably not a false positive. If it is a false positive, visit the Clam AV "submit a file" page and report it via the false positive link. You will be doing all Clam and ClamWin users a favor.

Regards,
View user's profileSend private message
Realtek driver fmapp.exe identified as virus
bobp0303


Joined: 01 Mar 2015
Posts: 0
Location: New York
Reply with quote
This file appears to be necessary to the system. How can I attach the file image so the ClamWin database gets updated?
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
Clam AV provides the scanning engine and signature database used by ClamWin. Upload the file to Clam AV as a false positive, and also scan it on Virus Total. That's the best way I can tell you to get it corrected.

Regards,
View user's profileSend private message
Thanks, GuitarBob
bobp0303


Joined: 01 Mar 2015
Posts: 0
Location: New York
Reply with quote
I play keyboards -- funny connection! I've already run it through the virus detector and it's adjudged to be not a virus. I'll upload the file and see if we can get the database updated appropriately.

Best regards,
View user's profileSend private message
ROCKNROLLKID


Joined: 23 Sep 2013
Posts: 0
Location: **UNKNOWN**
Reply with quote
I edited out your email so no one sends you spam.
View user's profileSend private message
Clamwin Identifies Realtek Driver & Intel Network as a V
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic