|
raym
| Joined: 23 Sep 2016 |
| Posts: 0 |
| Location: New York |
|
|
 Posted: Fri Sep 23, 2016 2:22 pm |
|
 |
 |
|
|
I have windows 2008 R2 server and I am running ClamAV 0.99.01.
The daily scan found a "virus". can someone help me find the definition for the following virus.
Win.Trojan.Agent-1696577 FOUND
|
|
|
|
ROCKNROLLKID
| Joined: 23 Sep 2013 |
| Posts: 0 |
| Location: **UNKNOWN** |
|
|
| Posted: Fri Sep 23, 2016 7:51 pm |
|
|
|
|
|
It should tell you which file, along with its directory path, was detected by that signature.
Please note this is the ClamWin forums and doesn't have any contact ClamAV. You will need to bring this up at the ClamAV contact page.
|
|
|
|
raym
| Joined: 23 Sep 2016 |
| Posts: 0 |
| Location: New York |
|
|
| Posted: Fri Sep 23, 2016 8:10 pm |
|
|
|
|
|
Thank you for the suggestions.
I could not find any information when I google the virus.
I will look at the dictionary file.
I also submitted to clamAV
|
|
|
|
GuitarBob
| Joined: 09 Jul 2006 |
| Posts: 9 |
| Location: USA |
|
|
| Posted: Fri Sep 23, 2016 8:34 pm |
|
|
|
|
|
when you identify the file, upload it to Virus Total. See what other AVs say about it. Every AV will have a different name for it--search the web for a couple of the names.
It may be that the file is falsely detected, a false positive. If Clam is the only AV on Virus Total that detects it, Virus Total will tell Clam Av about the false positive so they can change their signature.
Regards,
|
|
|
