/usr/lib/codecs/3ivx.dll: Win.Trojan.Fakesmoke-33 FOUND

Asked by Marek Wrzosek

ClamAV found it. Is 3ivx.dll really a trojan?

Question information

Language:
English Edit question
Status:
Solved
For:
Medibuntu Edit question
Assignee:
No assignee Edit question
Solved by:
Marek Wrzosek
Solved:
Last query:
Last reply:
Revision history for this message
gumbeto (gumbeto) said :
#1

Same thing here. Running clamscan I get:

$ clamscan /usr/lib/codecs/3ivx.dll
/usr/lib/codecs/3ivx.dll: Win.Trojan.Fakesmoke-33 FOUND

----------- SCAN SUMMARY -----------
Known viruses: 1552363
Engine version: 0.97.6
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 1.11 MB
Data read: 1.10 MB (ratio 1.00:1)
Time: 2.636 sec (0 m 2 s)

Revision history for this message
Gauvain Pocentek (gpocentek) said :
#2

From what I could find, this is a clamav false positive:
https://www.virustotal.com/file/d4273c4d3e0b7080073078665d88293e71ecac6539e9e82c0badb224e9d96721/analysis/

And I don't believe it would harm a linux installation.

If you're not confident enough, just remove the file.

Revision history for this message
Marek Wrzosek (marek-wrzosek) said :
#3

ClamAV with daily.cld version 16449 says OK, so it was FP and it's fixed.

/usr/lib/codecs/3ivx.dll: OK

----------- SCAN SUMMARY -----------
Known viruses: 1553781
Engine version: 0.97.6
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 1.11 MB
Data read: 1.10 MB (ratio 1.00:1)
Time: 6.038 sec (0 m 6 s)