![]() |
| Panda InternetSecurity Detected as trojan |
|
GuitarBob
|
These are probably "false positive" detections for files which are not really infected by malware. All antivirus programs get them sometimes.
You can verify files by uploading them (one at a time) to Virus Total, where they will scan your file with over 50 antivirus programs, including the Clam AV program which furnishes its scan engine and virus signatures to ClamWin. If Clam AV is the only AV at Virus Total that detects a file as infected, it is certain to be a false positive detection. What happened is probably that ClamWin is detecting a Panda Virus signature somewhere that it has one just like it. So do not complain to Panda--unless there are several other AVs at Virus Total that also detect the file(s) as infected. Or Panda could contain some "good" code that many programs have--virus files sometimes use some of the same code as "good" programs--like opening/closing a file or some other "housekeeping" code. Virus Total will notify Clam AV if it falsely detects a file submitted to it so that Clam AV can correct its signature. It might take a week or longer for Clam AV to correct its code, however. You can restore a file from quarantine that is falsely detected via the QRecover program in the ClamWin\bin folder. Read the ClamWin documentation on how to do this. Before you restore a detected file, however, you should "whitelist" the file so ClamWin will not detect it any more. Read the documentation to see how to whitelist a file. I am glad you are using ClamWin with Panda because ClamWin is only a "second opinion" scanner. You now have good protection. Please let us know if we can be of any more help. Thanks for using ClamWin! Regards, |
||||||||||||
|
|
|||||||||||||
|
G.Filipe
|
Well I'll send the files to totalvirus as explained and see what happens!
thanks Regards |
||||||||||||
|
|
|||||||||||||
|
GuitarBob
|
Good! Most of the Clam AV signatures are simple/basic, and they can have more false positive detections than many other AVs. The Clam AV bytecode signatures are the best, but they do not prepare many of them. It takes too much time, and Cisco security people only work on Clam AV when they are not performing duties for Cisco. That's just the way it is for a free/open source AV, and ClamWin is almost 100% dependent upon Clam AV.
Regards, |
||||||||||||
|
|
|||||||||||||
| Panda InternetSecurity Detected as trojan |
|
||
|
Powered by phpBB © phpBB Group
Design by phpBBStyles.com | Styles Database.
Content © ClamWin Free Antivirus GNU GPL Free Software Open Source Virus Scanner. Free Windows Antivirus. Stay Virus Free with Free Software.
Design by phpBBStyles.com | Styles Database.
Content © ClamWin Free Antivirus GNU GPL Free Software Open Source Virus Scanner. Free Windows Antivirus. Stay Virus Free with Free Software.


