Jump to content
Aris

false detections started today

Recommended Posts

Hallo.

Please, I need some help. Today there are suddenly too many false detections... Other scanners say that the files are clear... I have sent a file but immmunet still detects something.

Dont know what to do. I have to shut down immunet for a while, and i suppose others have the same problem!

Share this post


Link to post
Share on other sites

Can you tell me more about it? And submit the FP via the website?It's probably a signature that need's fixing.
 

Share this post


Link to post
Share on other sites

not only one!!!

unfortunately, i counted about 10-15 different variants from a number of 60 files in my pc...

and it never ended up with scan because it stucked... 

clam.win.trojan was and with various numbers following.

I already have uploaded one file!

Edited by Aris

Share this post


Link to post
Share on other sites

Aris,

 

Understood, I will let that team know to be on the lookout for it. Can you send some screenshots, of the alerts for the FP in question or anything of the sort, so I can tell them exactly what to look for, and or the exact signature names? If not, the screenshot should be good enough for them to know exactly where the issue is and how to fix.

 

Share this post


Link to post
Share on other sites

Meanwhile, I downloaded SecureAPlus to work with it, and it uses ClamAV for offline scan! So I am sending you the first screenshots of the reports to see for yourself.

 

clamav-4.jpg

clamav-3.jpg

clamav-2.jpg

clamav-1.jpg

Share this post


Link to post
Share on other sites

I am seeing the issue with trying to download the latest software from sandboxie.com.  I also see it when scan on old installer SandboxieInstall-514.exe.

Any fixes yet.

Share this post


Link to post
Share on other sites

So, it looks like the signatures- mentioned in that screenshot have been dropped out of the signature set since Friday evening-

can you do a new update and then re-scan?

Share this post


Link to post
Share on other sites

It seems that it started working well now!

Maybe, they should inform us what was the problem! 

And I have another question. How can I upgrade clamav inside Immunet? The current version is 100.1 but Immunet has 99.3 ....

Thank you, the pitty story is the lost time with all these!!! Too much time!

Share this post


Link to post
Share on other sites

ok, thank you for your help! It must be a whitelist signature set, I suppose.

So, how do we upgrade ClamAV inside Immunet? Is it possible to copy files from a ClamAV istallation to clamav folder of Immunet?

Share this post


Link to post
Share on other sites

I still can not download the latest Sandboxie version.  I updated 2018-08-05 17:35.  I am running version 6.0.8.10638.

Edited by ImmunetSalas

Share this post


Link to post
Share on other sites

You cannot upgrade clamav within Immunet, though- Immunet will be coming out with a new version "soon"
which will have the latest changes to clamav.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×