Jump to content

Archived

This topic is now archived and is closed to further replies.

Gualano Marco

discrepancy between infected objects and cleaned objects numbers

Recommended Posts

Hi,
sometimes 'and with some files', I found a discrepancy between 'infected objects' number and 'cleaned object' number at the end of cleaning that file:

 

post-1889-0-19866500-1383730926_thumb.jpg
post-1889-0-73185000-1383730933_thumb.jpg

 

post-1889-0-76719400-1383730947_thumb.jpg
post-1889-0-93859000-1383730954_thumb.jpg

 

I have uploaded the two files and PMed Marcos with their link to reproduce this problem.

 

Share this post


Link to post
Share on other sites

The difference between the number of scanned and cleaned objects is most likely that your Autoit malware also contains some clean files inside. Try enabling logging of all scanned files so that you also see clean files in the scan log. The fact that the results are displayed doubled or tripled in the case of archives has been noted as a bug.

Share this post


Link to post
Share on other sites

The difference between the number of scanned and cleaned objects is most likely that your Autoit malware also contains some clean files inside. Try enabling logging of all scanned files so that you also see clean files in the scan log. The fact that the results are displayed doubled or tripled in the case of archives has been noted as a bug.

 

Hi Marcos,

 

the autoit malware has three clean files an only one malicious file:

 

 

post-1889-0-39966500-1383735469_thumb.jpg

 

 

So, can you now explain why eset claims that it had cleaned two files?

Share this post


Link to post
Share on other sites

1st cleaned object - script.au3

2nd cleaned object - f734d0219... .exe

Share this post


Link to post
Share on other sites

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...