Virus Detected in Palemoon - Pale Moon forum (2024)

keep getting virus detected in ClamwinAV for palemoon files

Scan Started Wed Sep 20 09:56:55 2017
-------------------------------------------------------------------------------

D:\palemoonupds1\palemoon-27.3.0.win32\palemoon\browser\omni.ja: Html.Exploit.CVE_2017_8757-6336185-0 FOUND
D:\palemoonupds1\palemoon-27.3.0.win32.zip: Html.Exploit.CVE_2017_8757-6336185-0 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 6303697
Engine version: 0.99.1
Scanned directories: 83
Scanned files: 1214
Infected files: 2
Data scanned: 413.75 MB
Data read: 396.85 MB (ratio 1.04:1)
Time: 62.301 sec (1 m 2 s)

Even the newest palemoon versions show as having a virus

anyway to fix this, i contacted Clamwin but not fix yet

Thanks, Dragon

Welcome to the forum!

ClamAV have a lot of false positives. Check the files with https://www.virustotal.com

Also where did you download Pale Moon from? Latest version is 27.4.2 and not 27.3.0

This is a false positive; nothing we can do on our end about it.
The issue found is a Microsoft Edge specific vulnerability; I'm assuming the trigger here is website code, likeness of which is found in our internal browser JavaScript.

They shouldn't even be checking for this in local files, I think, and certainly not in something that is not part of a common format that can be opened by Edge.

https://nvd.nist.gov/vuln/detail/CVE-2017-8757

Don't use cheap or free "AV" !

By all means, use "cheap or free AV". But use your brain too.

postbuz wrote:

Don't use cheap or free "AV" !

By all means, use "cheap or free AV". But use your brain too.

Use your brain first, and keep your free, cheap or Pro AV as a safety net in case you miss something or something slips through unexpected.

Hi! I registered to ask this. I wanted to install PM x64 but first tested it in VirusTotal (as I do with every other application). Surprisingly VT gave one threat:

https://www.virustotal.com/bg/file/de0a ... 506859108/

Is it false-positive? I had similar issue with few Ashampo installs which all turned to be false-positives and were removed by Ashampo's demand.

Thank you!

Today I needed to downgrade my FF to 55 and cylance gave this result about it too.

I've had plenty of experience with ClamAV in Linux, and can only say that this utility is worse than useless, as it is one of the lousiest scanners in creation, and gives one a false sense of security.

In fact *all* AV software is mostly useless. Trojans are composed of two parts; RATs and Encryptors (which encrypt the RAT booger payload). A good Zero-Day exploit will NOT be discovered by *any* AV software, as they are all first tested against sites like VirusTotal to begin with. Some premium ones are never eventually detectable. The cheap and free boogers (there is a marketplace for them) often take a month or two to detect.

Techie users will use
site blockers (hosts, and Peer Blocker type utils)
script blockers (NoScript, et al)
cookie/LSO blockers (Ghostery, et al)
ad blockers (adblock et al)

uBlock Origin may be a good simple option for non-techies, if you can get it to work in PM. I cant (at the moment, at least...)

millpond wrote:uBlock Origin may be a good simple option for non-techies, if you can get it to work in PM. I cant (at the moment, at least...)

What? just install it and finish. I never see any problems with uBlock in Pale Moon.