fchan at molsci
Apr 18, 2012, 2:10 PM
Post #7 of 14
(2820 views)
Permalink
|
On 18-04-2012 10:42, Alain Zidouemba wrote:
> What is the file being detected as? What is the MD5 for the file being detected?
>
> - Alain
>
> On Wed, Apr 18, 2012 at 1:38 PM, Frank Chan<fchan [at] molsci> wrote:
>> On 12-04-2012 20:09, Frank Chan wrote:
>>> On 11-04-2012 17:33, Frank Chan wrote:
>>>> On 11-04-2012 16:08, Alain Zidouemba wrote:
>>>>> Frank,
>>>>>
>>>>> This is a FP that has already been taken care of. Please update your
>>>>> signatures and let us know if you run into any problems.
>>>>>
>>>>> Thanks,
>>>>>
>>>>> -Alain
>>>>>
>>>>> On Apr 11, 2012, at 7:06 PM, Frank Chan<fchan [at] molsci> wrote:
>>>>>
>>>>>> I was doing scan of my hard drive of my MS Windows XP system and
>>>>>> noticed the scan results that some components of Google Chrome were infected
>>>>>> by W32.Virut.Gen.D-148. Here is the excerpt of the scan results.
>>>>>>
>>>>>> C:\Documents and Settings\Frank\Local Settings\Application
>>>>>> Data\Google\Chrome\Application\18.0.1025.151\chrome.dll: W32.Virut.Gen.D-148
>>>>>> FOUND
>>>>>> C:\Documents and Settings\Frank\Local Settings\Application
>>>>>> Data\Google\Chrome\Application\18.0.1025.151\Installer\chrome.7z:
>>>>>> W32.Virut.Gen.D-148 FOUND
>>>>>>
>>>>>> I also found the same results for several other systems I have at work&
>>>>>> home so is Google Chrome truly infected or this a false positive. I have
>>>>>> scanned the Google Chrome for Apple Mac but it doesn't appear to be infected
>>>>>> (when I scan with clamav).
>>>>>> Anyone else seen this?
>>>>>>
>>>>>> Frank
>>>>>>
>>>>>>
>>>>>> _______________________________________________
>>>>>> Help us build a comprehensive ClamAV guide: visit
>>>>>> http://wiki.clamav.net
>>>>>> http://www.clamav.net/support/ml
>>>>> _______________________________________________
>>>>> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
>>>>> http://www.clamav.net/support/ml
>>>>>
>>>>>
>>>> Thank you Alain for clearing this up.
>>>> _______________________________________________
>>>> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
>>>> http://www.clamav.net/support/ml
>>>>
>>>>
>>> Hi Alain,
>>> I checked it again today and it showed no infection in Google Chrome.
>>>
>>> Thank you,
>>> Frank
>> Hi Alain,
>> I checked it again this morning and I still get a possible false positive
>> with Google Chrome with the same file again.
>>
>>
>> Thank you,
>> Frank
>> _______________________________________________
>> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
>> http://www.clamav.net/support/ml
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>
>
Hi Alain,
Here is the MD5 sums of the files you requested.
9652e7d2d40f72c4f4acec0e2dea28a1 chrome.7z
5974bc2d26dc0f1e9755ccc2806cfda2 chrome.dll
Again this is possible false positive is in the same folder location as
before and here is the excerpt from the log:
C:\Documents and Settings\Frank\Local Settings\Application
Data\Google\Chrome\Application\18.0.1025.162\chrome.dll:
W32.Virut.Gen.D-148 FOUND
C:\Documents and Settings\Frank\Local Settings\Application
Data\Google\Chrome\Application\18.0.1025.162\Installer\chrome.7z:
W32.Virut.Gen.D-148 FOUND
Other MS Windows systems that I did clamscan on show the same thing.
Thank you,
Frank
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
|
