discrepancy between infected objects and cleaned objects numbers

[Gualano Marco 2]

Hi,
sometimes 'and with some files', I found a discrepancy between 'infected objects' number and 'cleaned object' number at the end of cleaning that file:

 

 

 

I have uploaded the two files and PMed Marcos with their link to reproduce this problem.

 

Edited November 6, 2013 by Gualano Marco

[Marcos 5,727]

The difference between the number of scanned and cleaned objects is most likely that your Autoit malware also contains some clean files inside. Try enabling logging of all scanned files so that you also see clean files in the scan log. The fact that the results are displayed doubled or tripled in the case of archives has been noted as a bug.

[Gualano Marco 2]

The difference between the number of scanned and cleaned objects is most likely that your Autoit malware also contains some clean files inside. Try enabling logging of all scanned files so that you also see clean files in the scan log. The fact that the results are displayed doubled or tripled in the case of archives has been noted as a bug.

 

Hi Marcos,

 

the autoit malware has three clean files an only one malicious file:

 

 

 

 

So, can you now explain why eset claims that it had cleaned two files?

Edited November 6, 2013 by Gualano Marco

[Marcos 5,727]

1st cleaned object - script.au3

2nd cleaned object - f734d0219... .exe