I’m using Ubuntu 15.1, ClamAV, and Avast. Avast reports the “busybox” file (/bin/busybox) to have the ELF:MrBlack-BH trojan. The AskUbuntu Forum reports this as a false-positive, and www.virustotal.com shows Avast as the only one of 56 different scan engines to detect this. So… either Avast has got the drop on everyone else, or it’s a false-positive. Can anyone confirm?
Similarly, Avast reports the JS:ScriptSH-inf trojan in the ClamAV databases… “real or not real?”
http://www.totalvirus.com/You mean virustotal.com. ;)
The ClamAV detection is of course a Classic program conflict, result of running multiple AV
Why Using Multiple Antivirus Programs is a Bad Idea >> https://blog.kaspersky.com/multiple-antivirus-programs-bad-idea/2670/
https://www.avast.com/false-positive-file-form.php
Report it to avast as a (possible) false positive
Multiple scan engines… yep, they can conflict… and some Doctors don’t appreciate obtaining “second opinions” of their prognosis either. Given the location of the reported bugs, I suspect the problem is just conflicting programs, but then it could still be prudent to check nes pas?
If you want a secondary problem free scanner, use Malwarebytes
Hello,
thanks for notice detection ELF:MrBlack-BH [Trj] will be fixed in next VPS release.
Milos