eFMer - BoincTasks and TThrottle forum

BoincTasks For Window, Mac & Linux => Questions => Topic started by: KenSharp on February 05, 2016, 07:04:42 AM

Title: ClamAV reports Win.Adware.Eorezo-528 in setup program
Post by: KenSharp on February 05, 2016, 07:04:42 AM
My system has started reporting that the setup program for BoincTasks contains adware, specifically Win.Adware.Eorezo-528. This has only recently started occurring.

Virustotal confirms that it's only ClamAV that is reporting this:
https://www.virustotal.com/en/file/a792a11062f6dc011f7b8089df06f477b0eb97dc83bf7702fff535b8a6b1328b/analysis/1454655310/

Looks like a false positive. However, ClamAV can and is used as a virus scanner in some proxy solutions. Indeed it works well with Squid. The result being that the BoincTasks application could be getting blocked by proxies before it gets chance to be blocked by Clam running on a desktop system.
Title: Re: ClamAV reports Win.Adware.Eorezo-528 in setup program
Post by: fred on February 07, 2016, 12:49:50 AM
There isn't much you can do with false positives,

I tried https://www.metascan-online.com and got 2 positives.

Send the file to http://www.clamav.net/ as a false positive, who know this may help

Thanks for the report.

Fred
Title: Re: ClamAV reports Win.Adware.Eorezo-528 in setup program
Post by: KenSharp on February 11, 2016, 11:15:06 AM
I've submitted a false positive to ClamAV. I've never even heard of the other AV causing the false positive so I'll leave that for someone else. We'll see what happens.