I just did one of my occasional virus scans on ClamXAV, and it found a file infected with a certain CVE_2012_0754-5. However, the file in question wasn't in some odd place; it was an .m4a in my iTunes Music folder. Considering I've had this file for months and done scans since without anything picked up, and the fact that this is an iTunes-purchased song, I can't help but think that there's nothing wrong with the file and that this is a false positive. But, there's the chance it isn't, too. So, I ask you, what's the best course of action in this situation?
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
ClamXAV detected infection...false positive?
- Thread starter xTRIGGER092x
- Start date
- Sort by reaction score
I'm not sure what it thought it detected, but if you bought the song from itunes, it's fine, and probably would be fine even if you hadn't.
Maybe not for OS X, but I do have Windows computers on my network, so if it is an infection, I'd prefer to get it taken care of.
It may be a Windows virus, but unless that file has been modified since the last scan, I still think it isn't anything to worry about.
You need to update your Adobe software.
http://www.adobe.com/support/security/bulletins/apsb12-03.html
I just did, and it still detects the infection in the song.
Also, I put the file on a flash drive and scanned it with Microsoft Security Essentials on my Windows PC, and it detected nothing, so, yeah. I guess it's a false positive?
Nothing except the file name (a song), the path (Music subfolder in iTunes), and the infection (CVE_2012_0754-5).
As I thought. That's not an infection. It's not malware of any kind. It's a vulnerability in Adobe software. To get rid of the false positive, you can import the song into iTunes and create a new copy (iTunes > Advanced > Create xxx version) (where xxx is your preferred file type.)
That's good, but the copy also had the vulnerability detected. Would it work if I just deleted it, then redownloaded the song from iCloud?
Yeah, that oddly didn't work, lol. I might do that, or just make the vulnerability an exception.
More False Positive
Hey, sorry for resurrecting an old thread, but i would like to add that i am receiving the same infection code for my Bjork album "Biophilia"
Either ClamXav seriously found something or is telling me it doesn't like Bjork (yet it didn't detect it on her other albums lol) Is anyone else getting false positives on anything else that is obviously not infected?
Hey, sorry for resurrecting an old thread, but i would like to add that i am receiving the same infection code for my Bjork album "Biophilia"
Either ClamXav seriously found something or is telling me it doesn't like Bjork (yet it didn't detect it on her other albums lol) Is anyone else getting false positives on anything else that is obviously not infected?
It's definitely a false positive, as there is no Mac OS X malware in the wild that is found in music files.