ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
False positives - W32.Virut-1
cousinscuzzy


Joined: 06 Aug 2007
Posts: 1
Reply with quote
After updating my virus definitions last night, ClamWin detects W32.Virut-1 in three files associated with Cygwin:

bash.exe
sh.exe
bash-3.2.15-13.tar.bz2

I'm certain this is a false positive. Please let me know if there's a better way to report this or more information I can provide

Thanks!
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4362
Location: USA
Reply with quote
The best way to handle a false positive is to let the people at ClamAV who maintain the signatures know about it. Go to http://cgi.clamav.net/sendvirus.cgi on the web to upload the file(s) and tell them. They will update the signature(s) if necessary to exclude false positives.

I always like to check out the file(s) at http://www.virustotal.com/ with VirusTotal first. VT will check files for free against 30 antivirus programs. If a couple of other antiviruses besides Clam spot a virus, it's probably not a false positive.

Regards,
View user's profileSend private message
False positives - W32.Virut-1
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic