False positive on Clamwin

Ask other users about problems encountered with portable apps or help by posting solutions to existing problems.
Post Reply
Message
Author
User avatar
Babyscout19
Posts: 9
Joined: Sat Jun 28, 2014 8:47 am

False positive on Clamwin

#1 Post by Babyscout19 »

[Moderator note: the user below has been banned. While viruses are an important security issue, Clamwin should not be considered malware. We encourage users to actually visit virustotal.com (which the user below references) and see that -- when there's only one or two sources listing it as a concern -- it's likely not a virus. For more information, see the about.com website on False Positives]


---

Clamwin, a highly trusted antivirus I been working with a while now, has a link on its page from the author linking to some sort of update called X CLAMWIN. Scanned by virustotal.com and re verified on checking other sources, it has been found to contain the file

Trojan-Downloader.Autoit.gen

This Trojan is known for its ability to open a "Backdoor" to other viruses to enter the computer and can begin screenlogging, stealing personal data, etc. It does NOT spread on its own means, so please, if you have CLAMWIN X on your computer downloaded from that link, please check it at http://www.virustotal.com
***************************************
I have warned the direct page hosting this for the problem and hope that it is soon resolved. The link to the page in fault is as follows:

http://www.portablefreeware.com/index.php?id=601
LOOK UNDER ALTERNATIVES
Which links to http://www.winpenpack.com/en/download.php?view.38


DIRECT LINK http://sourceforge.net/projects/winpenp ... p/download

EXTRACT AND SCAN X-ClamWin.exe
It will not detect it as a whole zip due to its size.


:D Just a freindly warning
Love your cuddly puppy -Babyscout19

User avatar
Midas
Posts: 6727
Joined: Mon Dec 07, 2009 7:09 am
Location: Sol3

Re: False positive on Clamwin

#2 Post by Midas »

Babyscout19 wrote:Trojan-Downloader.Autoit.gen
  • Isn't this the age old AutoIt false positive? :? :?:

User avatar
joby_toss
Posts: 2971
Joined: Sat Feb 09, 2008 9:57 am
Location: Romania
Contact:

Re: False positive on Clamwin

#3 Post by joby_toss »

@Babyscout19: are you serious? What's the point of this No.1 post of yours? Are you implying that, because of a shitty false positive warning, WPP is distributing malware? Come on...

https://www.virustotal.com/en/file/5689 ... /analysis/

Don't love me! :(

User avatar
Babyscout19
Posts: 9
Joined: Sat Jun 28, 2014 8:47 am

Re: False positive on Clamwin

#4 Post by Babyscout19 »

Hmmm A false positive is highly possible, but I have seen quite a few diffrent signs of it saying otherwise, such as linking me to multiple sites that are diffrent evereytime...... even for just a split second... Im just trying to be the freindly neiborhood spiderman here.... Please dont judge me im only trying to help...

User avatar
webfork
Posts: 10821
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: False positive on Clamwin

#5 Post by webfork »

Babyscout19 wrote:Please dont judge me im only trying to help...
I don't think you are and here's why:
  • After we told you that was a false positive twice, you continued to post to multiple threads, one of them from 7 years ago about your suspicions.
  • Your comments about Piriform and Run Me were irrational; how do you determine that there's something suspicious on something you can't even access?
  • Complaining about broken links on ancient posts is a waste of everyone's time
At this point I can't see any point in trying to get you onboard with the site norms and policies since you're clearly not paying attention. As such, you have been banned. Feel free to contact the admin if you feel this is unfounded/unfair.

Note to everyone else: I'm leaving the user's posts up temporarily but will pull them down soon.

User avatar
guinness
Posts: 4118
Joined: Mon Aug 27, 2007 2:00 am
Contact:

Re: False positive on Clamwin

#6 Post by guinness »

You should leave them up as an example of what is considered bad posing etiquette. :mrgreen:

Post Reply