One more False +ve..!!!!!!!

Viruses and worms
1

Avast! says claw.exe is infected…but it is definitely a False +ve, virus total result : 3/46
I’ve sent it to virus@avast.com…hope it will be cleared soon…

2

Thanks please can you submit it to virus lab here ?

3

Yes It is also sent to the virus lab through support option of avast! av’s GUi…

4

It’s a matter of time now.

spywar

5

Again spywar, please don’t curve the bends on this being a false +ve one so resolutely. Verify first and then feel to be outspoken later.
Claw,ex- can be a potential security risk which can be modified maliciously by a virus, as it is not being found here where it should be located:
e.g. Failed for file C:\WINDOWS\System32\ claw.exe
So agree that normally it should be considered safe, as it does not come from a suspicious source.
See: http://www.prevx.com/filenames/1859251612465441686-X1/CLAW.EXE.html
If being a FP it is mostly due to false detections for the packer process used,

polonus

6

Can you post the link to VT scan result…

7

I scanned the same file on my machine [Yeah,I do play captain claw] and avast isnt flagging it.

8

This is the VT link
https://www.virustotal.com/en/file/05ce483bbeefe36aa721034df3503f1d27f769dc4169cb99fd0459e7c577c1cb/analysis/

9

Sorry,but the Claw.exe I have Is much older and is flagged as clean. :o
https://www.virustotal.com/en/file/5130d7d951e4a350fc19fe3134aa447a17c3e220ae49e7834d06ec79724fa0c0/analysis/

10

Analysis date: 2009-07-21 19:46:26 UTC ( 3 years, 7 months ago )
Try to reuplaud it to see.

11

marked clean even after re-analysis: https://www.virustotal.com/en/file/5130d7d951e4a350fc19fe3134aa447a17c3e220ae49e7834d06ec79724fa0c0/analysis/1362240678/

12

Avast still detect it…!!! No actions or reply yet from avast team…!! :o

13

Is there anyone in avast! virus lab!!! Can anyone form avast confirm claw.exe is FP or not… its shame… at least say did they get my sample or not… >:(

14

Please calm down I notified Milos he’ll probably reply to you.

15

Hello,
it should be fixed in stream 13030700-21 (filename → convert the stream number number to hex: pkg1303070000000015.bin).

Milos

16

Oh…thanks Milos… :smiley:

17

And it is cleared… :smiley: Thanks…