Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: ClamAV: win32

Possible false positive: firefox 11, firefox.exe: Win.Trojan.Swrort-3602 FOUND

 

 

ClamAV win32 RSS feed   Index | Next | Previous | View Threaded


dank at kegel

Mar 9, 2013, 10:39 PM

Post #1 of 1 (182 views)
Permalink
Possible false positive: firefox 11, firefox.exe: Win.Trojan.Swrort-3602 FOUND

Reported by a winetricks user. Downloading
'http://download.mozilla.org/?product=firefox-11.0&os=win&lang=en-US'
and running that installer, and then running clamscan on the install
directory yields
firefox.exe: Win.Trojan.Swrort-3602 FOUND
(This was in Wine on Ubuntu 12.04, right after running freshclam, but
probably behaves the same on Windows.)

Virus Total shows that only clamav detects a problem with that file, see
https://www.virustotal.com/de/file/6405cff46e56b5e9eb4e9fb30a85a9febe195168619de1a6c2936f70e0fb9c78/analysis/

I think there was another false positive for that threat reported earlier:
http://thread.gmane.org/gmane.comp.security.virus.clamav.user/38336

Thanks!
- Dan
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

ClamAV win32 RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.