Clamxav keeps reporting a false positive.

[okizen]

How do I stop Clamxav from quarantining an app which I had just downloaded from the App Store.

 

[IWT]

Hi and welcome.

I no longer use this software, but the answer to your question is within the Settings Area where you can turn off automatic quarantine - see here: ClamXAV | Settings Area

Other options would obviously be to disable ClamXav or uninstall it.

I must assume that you have a very good reason for wanting AV software and ClamXav in particular and that is clearly your business and not mine.

Most of us here, I think, prefer to use anti-malware apps rather than AV apps and, as I mentioned, I gave up ClamXav after some years of using it.

Anyway, see if the linked article helps. Please post back.

Ian

 

[chscag]

I agree with Ian. Remove ClamXav and instead run an anti malware app. There are no viruses that can infect your Mac, however, there is malware that you should be aware of and protect yourself from. We recommend running the Detect X Swift app which will scan for and identify any malware.

 

[okizen]

Thanks guys. Unfortunately DetectX Swift has also flagged the app (Duplicate Cleaner) as infected. I don't understand why this is. I assume all third party apps would have to go though a test for both malware and virus infections before being allowed onto Apple's App Store. How do I allow DetectX to ignore its Duplicate Cleaner's findings so as not to have it flagged?

 

[chscag]

I'm assuming you're referring to the "Duplicate Cleaner for iPhoto.app"? According to the app description it supposedly works also for the Photos.app. It has mixed reviews in the app store with one very obvious bad review. Not sure if I would trust that app.

It appears that you can set a profile in DetectX Swift so that it will ignore the Duplicate Cleaner for iPhoto app. But you might want to look around for another app that can find duplicate photos.

 

[okizen]

Hi chscag, the 'Duplicates Cleaner app' I'm referring to is sold by PCVARK and the image of it in the App Store looks like a robot holding a vacuum cleaner.

 

[chscag]

I found it. It seems there are several apps that have the name or part of the name "Duplicate Cleaner". Again, I don't know why it's flagged as malware. Do you have that many dupe files or photos that you need an app to find them? I would think after you found all the dupes on your hard drive that you would not need to run the app again.

Also, I noticed the Duplicates Cleaner app states that it's verified by Norton and verisign. I wonder if that might be what's setting off the malware alarm with both ClamXav and DetectX Swift?

 

[okizen]

Hi chscag,
When I'd run Duplicates Cleaner on one of my external hard drives, I had found over 100GB of duplicate files, 98% being video files but they were spread all over the drive.
I'm not sure if Norton or VeriSign could be the cause for why Duplicates Cleaner is being flagged as malware.

Thanks.

 

[IWT]

I found this app too.

When I looked at the reviews, one caught my attention. I made a screenshot of it. No other way of copying it. I hope you can read what it says.

If Malwarebytes also flagged it up as malware as well as ClamXav and DetectXSwift, then there must be something there I'd be very wary of.

There are dozens of alternatives in the App Store under "Duplicate Cleaner" and "Duplicate Finder" that will do the job for you. Read the reviews. Some helpful, some useless. Look for a trend.



Ian

 

[gsahli]

Read about PCVARK and Duplicates Cleaner here:
PCVARK plays dirty - Malwarebytes Labs | Malwarebytes Labs

 

[Rod]

Thanks guys. Unfortunately DetectX Swift has also flagged the app (Duplicate Cleaner) as infected. I don't understand why this is. I assume all third party apps would have to go though a test for both malware and virus infections before being allowed onto Apple's App Store. How do I allow DetectX to ignore its Duplicate Cleaner's findings so as not to have it flagged?

You whitelist it just as I had to do with a couple elements of CleanMy Mac 3


Sent from my iPhone using Mac-Forums

 

[IWT]

@Rod

See last two posts above #9, 10.

Enough to think about removing said app (if possible!!) and getting another, wouldn't you say?

It's not as if there weren't dozens++ to choose from.

Ian

 

[okizen]

Thanks Ian, gsahli and Rod. So if Duplicates Cleaner is malware, what harm does it actually do?

 

[Rod]

It’s an interesting question. For some reason CleanMy Mac X has 5 files in Application Support ( Library). These are the files I’ve whitelisted. They all pertain to the “helper” app which I have disabled. I have been using CMM for over 3 years now as has my wife with no ill effects and the app does have full system access in Privacy and Security preferences. So in the end it’s up to you. You could allow DetectX to remove the offending files and see if the app still works or which parts don’t.


Sent from my iPhone using Mac-Forums

 

[Rod]

The thing is I suppose, DetectX sees something as a potential threat. This is based on known definitions and how strictly it applies them will determine what it defines as a threat.


Sent from my iPhone using Mac-Forums

 

[Rod]

You could possibly put it to the developers of DetectX. They’ve been pretty good in response to contacts.


Sent from my iPhone using Mac-Forums

 

[chscag]

Best advice is to remove the app and use one of the other many clean apps instead. Who knows what that app is leaving behind on your hard drive, just remove it and be safe.

 

[okizen]

Thanks Rod.

 

[pm-r]

Some more interesting posts on the same subject here:
Malware found on app Duplicates cleaner - Apple Community

And here:
Duplicates Cleaner is being flagged as malware
Duplicates Cleaner is being flagged as malware - Google Search

And this one is especially interesting and may need some further checking out:

Remove Mac Duplicate Cleaner
By Chona Esjay | Posted on April 12, 2017 | Updated on March 12, 2018 0 Comment
Mac Duplicate Cleaner is a suspicious computer utility software made specifically for Mac systems. It can be installed on the computer even without user’s consent. Attacker usually bundled this rogue program to a number of freeware and shareware currently deployed on the internet. Browser redirects is also used to drive user into promotional website that entices them to install Mac Duplicate Cleaner. Said website will impose various deceiving tricks in convincing visitors to download and install the application.

Remove Mac Duplicate Cleaner | MalwareFixes


- Patrick
======

 

[Rod]

Thanks guys. Unfortunately DetectX Swift has also flagged the app (Duplicate Cleaner) as infected. I don't understand why this is. I assume all third party apps would have to go though a test for both malware and virus infections before being allowed onto Apple's App Store. How do I allow DetectX to ignore its Duplicate Cleaner's findings so as not to have it flagged?

I found this info on the DetectX Support page https://s3.amazonaws.com/sqwarq.com/AppCasts/DetectX_Swift_User_Guide.pdf
SEARCH (function in preferences)
Currently, the Search preferences only control the Whitelist function.
Use the Report... button to report items to Sqwarq Support if you believe they are false positives.
Use the Reset... button to remove items previously whitelisted. This will result in a Search function starting and any of the (previously) whitelisted items found will be reported in the Search results.

I might try this myself.