Community Discussions and Support
Sophos AV warning Win32/Hideproc.C for ClamAV

[quote user="FJR"]Donwloaded CalmAV from http://www.clamav.net/lang/en/about/win32 which gets ClamAVWindowsSetup.exe and got no warning from my Sophos!!![/quote]

That is the cloud version is no good for integrating with Mercury.

[quote]So I think it is not OK!!![/quote]

Maybe he has a corrupted version but I've never had anything bad from tBB at hideout.ath.cx, so it could be a false positive from Sophos.

[quote]In most cases you should download from original source![/quote]

In this case in would be http://sourceforge.net/projects/clamav/files/clamav/win32/ but that lacks some optimisation and a built-in service installer.  tBB's version (above) hasn't been updated recently, so I would try the version at http://oss.netfarm.it/clamav/ which is up-to-date.

[quote user="FJR"]Donwloaded CalmAV from <B>http://www.clamav.net/lang/en/about/win32</B> which gets <B>ClamAVWindowsSetup.exe </B>and got <B>no warning</B> from my Sophos!!![/quote] <P>That is the cloud version is no good for integrating with Mercury.</P> <P>[quote]So I think it is <B>not OK</B>!!![/quote]</P> <P>Maybe he has a corrupted version but I've never had anything bad from tBB at hideout.ath.cx, so it could be a false positive from Sophos.</P> <P>[quote]In most cases you should download from original source![/quote]</P> <P>In this case in would be <A href="http://sourceforge.net/projects/clamav/files/clamav/win32/">http://sourceforge.net/projects/clamav/files/clamav/win32/</A> but that lacks some optimisation and a built-in service installer.  tBB's version (above) hasn't been updated recently, so I would try the version at <A href="http://oss.netfarm.it/clamav/">http://oss.netfarm.it/clamav/</A> which is up-to-date.</P>

Hi All,

I downloaded the latest ClamAV version under http://hideout.ath.cx/ClamAV/ and I got a warning from my Sophos AV scanner:

Virus found: Tool:Win32/Hideproc.C

Is this OK (I assume that this Hideproc is used to hide the shell windows from ClamAV)?

Thanks,

Konrad

<p>Hi All,</p><p>I downloaded the latest ClamAV version under <a>http://hideout.ath.cx/ClamAV/ and I got a warning from my Sophos AV scanner:</a></p><p>Virus found: Tool:Win32/Hideproc.C</p><p>Is this OK (I assume that this Hideproc is used to hide the shell windows from ClamAV)?</p><p>Thanks,</p><p>Konrad </p>

Donwloaded CalmAV from http://www.clamav.net/lang/en/about/win32 which gets ClamAVWindowsSetup.exe and got no warning from my Sophos!!!

So I think it is not OK!!!

In most cases you should download from original source!

bye    Olaf

 

<p>Donwloaded CalmAV from <b>http://www.clamav.net/lang/en/about/win32</b> which gets <b>ClamAVWindowsSetup.exe </b>and got <b>no warning</b> from my Sophos!!!</p><p>So I think it is <b>not OK</b>!!!</p><p>In most cases you should download from original source!</p><p>bye    Olaf</p><p>  </p>
live preview
enter atleast 10 characters
WARNING: You mentioned %MENTIONS%, but they cannot see this message and will not be notified
Saving...
Saved
With selected deselect posts show selected posts
All posts under this topic will be deleted ?
Pending draft ... Click to resume editing
Discard draft