You are here

ClamWin: OpenOffice Portable 2.4 False Positive?

4 posts / 0 new
Last post
ultramookie
Offline
Last seen: 16 years 6 months ago
Joined: 2008-05-07 19:54
ClamWin: OpenOffice Portable 2.4 False Positive?

Anyone seeing this? I just scanned my USB flash drive and ClamWin Portable says that my OO 2.4 Portable is infected (I subsequently scanned with Symantec and it says nothing is infected).

ClamWin Portable output:

Scan Started Wed May 07 16:34:48 2008

-------------------------------------------------------------------------------

E:\PortableApps\OpenOfficePortable\App\openoffice\program\sw680mi.dll: Trojan.Hupigon-12219 FOUND

----------- SCAN SUMMARY -----------

Known viruses: 277225

Engine version: 0.93

Scanned directories: 837

Scanned files: 5930

Infected files: 1

Data scanned: 682.65 MB

Time: 354.747 sec (5 m 54 s)

--------------------------------------

Completed

--------------------------------------

Tim Clark
Tim Clark's picture
Offline
Last seen: 13 years 7 months ago
Joined: 2006-06-18 13:55
Multiply tests

Upload the file sw680mi.dll to:

VirusTotal:
http://www.virustotal.com/en/indexx.html

and

Jotti:
http://virusscan.jotti.org/

If the results confirm a false positive upload it to:
ClamAv and report is a probable FP at:

http://cgi.clamav.net/sendvirus.cgi
and let them know, be sure to check box for :
"A false positive (it is detected as a virus by ClamAV, but it is not a virus)"

Tim

Things have got to get better, they can't get worse, or can they?

ultramookie
Offline
Last seen: 16 years 6 months ago
Joined: 2008-05-07 19:54
thanks!

thanks tim! i checked using the two services you recommended and it does look like a false positive. i've also submitted the file to clamav.

Porti
Offline
Last seen: 16 years 5 months ago
Joined: 2008-06-02 03:22
ClamAV and OpenOffice

Hello Tim,

I've got the same problem but with OO 3 beta. The file scmi.dll was an Trojan. Here the destination:

E:\PortableApps\OpenOfficePortableTest\App\OpenOffice.org\Basis 3.0\program\scmi.dll: Trojan.Hupigon-9851

I've scanned with virustotal they scan tha file with 30 Antivitus-programs) and only ClamAV found the Trojan. So I think the dll is harmless.

I hope they updating the program a.s.a.p.

have anytime fun with portableapps.

Log in or register to post comments