Diva-GIS infected file?

rzdelander · Post by **rzdelander** » Fri Sep 24, 2010 4:17 am

Hello I have been working with Diva-GIS lately in Windows and I love it. At home I have a Mac so I decided to Install it using the Winebottler.

Today I run my antivirus (ClamXav) and It detects a Infection on de DIVA-GIS app

"/Applications/DIVA-GIS.app/Contents/Resources/drive_c/windows/system32/drivers/mountmgr.sys:"

Does anybody know something about this?

This mean that the mountmgr.sys that I have is corrupted or it is just because I am using a Mac ??

Anyway, I'll keep an eye on it. I will post If I discover something else.

Bye !

vitamin · Post by **vitamin** » Fri Sep 24, 2010 8:43 am

rzdelander wrote:"/Applications/DIVA-GIS.app/Contents/Resources/drive_c/windows/system32/drivers/mountmgr.sys:"

False alarm. This is Wine's own "driver" file. It can't be infected, because that file is a ... "fake" and not the real file.

rzdelander · Post by **rzdelander** » Sat Sep 25, 2010 12:43 am

then why my antivirus alerted me about it ?

rzdelander · Post by **rzdelander** » Sat Sep 25, 2010 12:44 am

Ah Thanks for the answer !!! (I forgot to say is on the previous post )

vitamin · Post by **vitamin** » Sat Sep 25, 2010 9:39 am

rzdelander wrote:then why my antivirus alerted me about it ?

Because most untiviruses look for a particular byte sequence as a signature of a virus. This technique prone to false positives, especially now with so many known viruses. Not even saying that it won't pick up unknown viruses or polymorphic viruses (that encrypt themselves with different passwords).

Diva-GIS infected file?

Diva-GIS infected file?

Re: Diva-GIS infected file?