Author Topic: ClamAV - HP K5400dtn driver EXE flagged as a worm  (Read 36201 times)

Offline Michael Simms

  • Newbie
  • *
  • Posts: 5
  • Kudos +0/-0
ClamAV - HP K5400dtn driver EXE flagged as a worm
« on: September 02, 2015, 06:03:10 PM »
Initial Full System scan after install flagged this one up. It's clearly a false-positive. HP Printer driver package version 8.3 for K5400dtn OfficeJet Pro. A good few years old and never flagged by any previous AV packages I've used.

File: C:\Program Files\HP\Digital Imaging\{AD277ED4-7E41-4074-911D-D34AF41B9D49}\setup\hpzrcn01.exe

Result: Win.Worm.Tenga-86 detected by ClamAV

SecureAPlus v3.4.1
Signature version 20868, Wed 02 Sep 05:37:09 2015

OS: Vista Business SP2 32-bit.

I've set it to ignore for now.

EDIT - More details about the driver package. It's the basic feature set without the full digital imaging software.

Quote
Details
The Basic Feature software solution is a driver-only software solution intended for users who want a basic print driver to use with their HP device. This software installation can be used on PC's which do not meet the minimum system requirements necessary to install the Full Featured software solution.
File name: OJProK5X00_Basic_8_3.exe
Release details
Released: Sep 19, 2008
Version 8.0.2
Fix and enhancements
Possible loss of print job when printing from simplex and duplex mode.
Unexpected closure of Microsoft Office PowerPoint application.
Resolve compatibility issue with Slovak, Catalan and Thai language Windows Vista OS

Download link from HP servers - http://ftp.hp.com/pub/softlib/software10/COL18289/mp-47283-4/OJProK5X00_Basic_8_3.exe (released September 19th 2008)
« Last Edit: September 02, 2015, 06:53:22 PM by Michael Simms »

Offline asan

  • Administrator
  • Newbie
  • *****
  • Posts: 45
  • Kudos +2/-0
Re: ClamAV - HP K5400dtn driver EXE flagged as a worm
« Reply #1 on: September 03, 2015, 10:42:02 AM »

Thank you for reporting this. We have flagged the file as FP.

Offline Michael Simms

  • Newbie
  • *
  • Posts: 5
  • Kudos +0/-0
Re: ClamAV - HP K5400dtn driver EXE flagged as a worm
« Reply #2 on: September 03, 2015, 07:27:57 PM »
No problems, thanks for flagging it.