ClamAV reports Win.Adware.Eorezo-528 in setup program

Started by KenSharp, February 05, 2016, 07:04:42 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

KenSharp

My system has started reporting that the setup program for BoincTasks contains adware, specifically Win.Adware.Eorezo-528. This has only recently started occurring.

Virustotal confirms that it's only ClamAV that is reporting this:
https://www.virustotal.com/en/file/a792a11062f6dc011f7b8089df06f477b0eb97dc83bf7702fff535b8a6b1328b/analysis/1454655310/

Looks like a false positive. However, ClamAV can and is used as a virus scanner in some proxy solutions. Indeed it works well with Squid. The result being that the BoincTasks application could be getting blocked by proxies before it gets chance to be blocked by Clam running on a desktop system.

fred

There isn't much you can do with false positives,

I tried https://www.metascan-online.com and got 2 positives.

Send the file to http://www.clamav.net/ as a false positive, who know this may help

Thanks for the report.

Fred

KenSharp

I've submitted a false positive to ClamAV. I've never even heard of the other AV causing the false positive so I'll leave that for someone else. We'll see what happens.