After updating my virus definitions last night, ClamWin detects W32.Virut-1 in three files associated with Cygwin:

bash.exe
sh.exe
bash-3.2.15-13.tar.bz2

I'm certain this is a false positive. Please let me know if there's a better way to report this or more information I can provide

Thanks!

The best way to handle a false positive is to let the people at ClamAV who maintain the signatures know about it. Go to http://cgi.clamav.net/sendvirus.cgi on the web to upload the file(s) and tell them. They will update the signature(s) if necessary to exclude false positives.

I always like to check out the file(s) at http://www.virustotal.com/ with VirusTotal first. VT will check files for free against 30 antivirus programs. If a couple of other antiviruses besides Clam spot a virus, it's probably not a false positive.

Regards,