robhardy1
Joined: 05 Aug 2006 |
Posts: 0 |
|
|
 |
Posted: Sat Aug 05, 2006 1:14 pm |
|
 |
 |
 |
 |
A couple of scans have revealed:
C:/Program Files/EarthLink TotalAccess/cnfgMail.reg: Trojan.WinREG.StartPage-6 FOUND
C:/Program Files/EarthLink TotalAccess/cnfgMail.reg: Can't remove
I have been to:
C:\Documents and Settings\All Users\.clamwin\quarantine on my computer, and the quarantine is empty.
I don't know much about computers, viruses, or Clamwin; but is there something I should do about this?
Thank you. ---Rob
|
|
alch
Site Admin
Joined: 27 Nov 2005 |
Posts: 0 |
|
|
 |
Posted: Sat Aug 05, 2006 1:46 pm |
|
 |
 |
 |
 |
most likely this is a false positive. Try scanning the file on https://www.virustotal.com, however I am almost sure there is no threat. Clamav database has some entries identifying trojans that set Internet Explorer homepage, and sometimes identifies a harmless registry script as such.
|
|
robhardy1
Joined: 05 Aug 2006 |
Posts: 0 |
|
|
 |
Posted: Sat Aug 05, 2006 2:08 pm |
|
 |
 |
 |
 |
Well, that's very interesting. I had not known about VirusTotal before.
OK, running it yeilds "no virus found" in every antivirus except one:
ClamAV devel-20060426 08.04.2006 Result: Trojan.WinREG.StartPage-6
Now, does this confirm a false positive?
Thank you! ---Rob
|
|
alch
Site Admin
Joined: 27 Nov 2005 |
Posts: 0 |
|
|
 |
Posted: Sat Aug 05, 2006 2:30 pm |
|
 |
 |
 |
 |
It is a false positive then
|
|
robhardy1
Joined: 05 Aug 2006 |
Posts: 0 |
|
|
 |
Posted: Sat Aug 05, 2006 2:41 pm |
|
 |
 |
 |
 |
Thanks, Alch! ---Rob
|
|