[Sophos strikes again]

Not for the first time, Sophos anti virus is reporting CCleaner as a virus "Mal/VB-K".

 

The last time this happened, they cleared it up within a day or so.

 

Can whoever told them about this last time please try again. And encourage them to be a bit more careful in their testing of new signatures.

[Virus scanner reports false positive for CCleaner]

While it isn't good for you folks, for me at least it is a relief to know that I am not the only one in the same boat!

 

It is, of course, typical that this happened at the weekend!

 

 

May have been fixed in a new Sophos update. It did not object to today's download.

[Virus scanner reports false positive for CCleaner]

Yes, its just false positive. MrG will have to contact sophos and have the issue fixed. Thanks for the information.

 

While it isn't good for you folks, for me at least it is a relief to know that I am not the only one in the same boat!

 

It is, of course, typical that this happened at the weekend!

[Virus scanner reports false positive for CCleaner]

Earlier today, my Sophos anti virus software warned me that it had detected a virus in the "uninstall" bit of CCleaner.

 

I suspect a false positive, so I came here to see what is happening. I see a new version and try to download it, but Sophos tells me that it is infected.

 

Checking the archives here, I find an earlier hot tempered report of this behaviour that went round in circles and did not end up in a satisfactory resolution.

 

As I say, I suspect a false positive. These things happen, but not usually with Sophos, which is better than the usual cowboy stuff from Norton/Symantec. But I am not inclined to install something that is going to deliver these messages.

 

In this case, maybe a "bought in" component, the uninstaller, is responsible.

 

Here is the bit of the AV log that matters:

 

20061112 093251 Virus 'Troj/Zlob-VU' has been detected in "C:\Program Files\CCleaner\uninst.exe"

 

20061112 093251 Infected file "C:\Program Files\CCleaner\uninst.exe" has been moved to "C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\INFECTED\uninst.exe.000".

 

20061112 101711 Virus 'Troj/Zlob-VU' has been detected in "C:\Documents and Settings\{username}\Local Settings\Temp\vq4xpv7i.exe"

 

20061112 101711 Infected file "C:\Documents and Settings\{username}\Local Settings\Temp\vq4xpv7i.exe" has been moved to "C:\Documents and Settings\All Users\Application Data\Sophos\Sophos Anti-Virus\INFECTED\vq4xpv7i.exe.000".

 

The second half is the result of trying to download the latest version of CCleaner.

 

You might like to tell Sophos that you are good guys.