![]() |
![]() | Problem: Latest antivirus def update sees all pdf as virus | ![]() |
![]() |
![]() | ![]() |
GuitarBob
![]() |
![]() |
ClamWin uses the scan engine and signatures provided by Clam AV. False positives should be reported to Clam AV at http://www.clamav.net/lang/en/sendvirus/ on the web. When you get to the upload page, be sure to classify the file as a false positive-I believe classification is set to virus. Clam Will adjust the signature within a couple of days.
It is unfortunate, but false positives occasionally happen because malware can use the same code, packers, etc. as "good" programs. Clam Av's false positive "farm," where signatures are checked before release is also not as large as that of many AVs. Is there a possibility you could set ClamWin's infected files option to Report only and configure it to send an email message to you upon detection? Regards, |
|||||||||||
|
![]() |
![]() | ![]() |
Administrator
![]() |
![]() |
Hi, thanks for your reply. I wasn't aware of an option to 'report only'. I will check it out tomorrow and configure it and also tell Clam av about the false positives.
|
|||||||||||
|
![]() |
![]() | ![]() |
GuitarBob
![]() |
![]() |
You only need to send one file when there are multiple false positives for the same virus.
Yesterday I saw that someone had reported some PDF false positives to Clam. I don't recall the false detecton's name, but I suspect it was the same one as you have. It should be corrected within a couple of days (long weekend, unfortunately). If you are running ClamWin version .97 on Vista or Windows 7 boxes, you can use the ClamWin Quarantine Browser (start, all programs, ClamWin, quarantine browser) to restore falsely-quarantined files. Before the next scan though, you should exclude the falsely-detected files via ClamWin's filters (configure, filters from the system tray icon). Regards, |
|||||||||||
|
![]() |
![]() | Problem: Latest antivirus def update sees all pdf as virus | ![]() |
|
||
![]() |
![]() |
Powered by phpBB © phpBB Group
Design by phpBBStyles.com | Styles Database.
Content © ClamWin Free Antivirus GNU GPL Free Software Open Source Virus Scanner. Free Windows Antivirus. Stay Virus Free with Free Software.
Design by phpBBStyles.com | Styles Database.
Content © ClamWin Free Antivirus GNU GPL Free Software Open Source Virus Scanner. Free Windows Antivirus. Stay Virus Free with Free Software.