You are here

ClamWin: False Positive?

4 posts / 0 new
Last post
arizona480
Offline
Last seen: 8 years 1 month ago
Joined: 2007-05-02 19:15
ClamWin: False Positive?

C:\Portable HD Apps (C)\XenonPortable\XenonPortable.exe: Worm.Waledac-4693 FOUND

Using the latest edition (0.95), it wasn't there when 0.94 scanned it a few days ago.

Tim Clark
Tim Clark's picture
Offline
Last seen: 13 years 2 weeks ago
Joined: 2006-06-18 13:55
First

First update to the latest definitions daily: 9320

I reported a similar FP to ClamAV yesterday, Worm.Waledac-#### and they fixed it a short while ago.

If it still shows up, upload the file to:
http://www.virustotal.com/en/indexx.html
and/or
http://virusscan.jotti.org/

If it shows clean there you can be sure it is a false positive.
You should then upload the file to to ClamAV being sure to check the False Positive check box at:
http://cgi.clamav.net/sendvirus.cgi

Tim

Things have got to get better, they can't get worse, or can they?

Antignor
Offline
Last seen: 14 years 8 months ago
Joined: 2009-08-21 06:40
Thanks, I hadn't read that

Thanks, I hadn't read that yet. Pretty inconvenient though.

Tim Clark
Tim Clark's picture
Offline
Last seen: 13 years 2 weeks ago
Joined: 2006-06-18 13:55
Sorry for the delay

Sorry for the delay in replying, had trouble posting yesterday.

If your Absolutely sure it's a false positive, as they have always been with Official Releases from PortableApps.com, you can skip the uploads to Jotti and VirusTotal and just submit the file to the ClamAV upload site.

I don't know how it could be any easier really, click the link, upload the file, submit.

With the variety of malware out there, and it changes everyday, False Positives are just a way of life with all AntiVirus/Spyware/Malware checkers. At least ClamAV gives an easy way to submit a sample and they usually fix the error fairly quickly.

The thing I like about ClawWin is that in it's default configuration it does nothing but give you a warning, it changes nothing and does no damage. It gives you a warning and you can then decide how to proceed. The best use of ClamWin is to download a file and check it before you run or use it. If you get a warning do not use the file until you get confirmation from other sources, and of course it should always be used in conjunction with your up to date real time antivirus product.

Tim

Things have got to get better, they can't get worse, or can they?

Log in or register to post comments