dgermann
Joined: 21 Mar 2010 |
Posts: 0 |
|
|
 |
Posted: Sat Jan 29, 2011 7:22 pm |
|
 |
 |
 |
 |
Hi--
For the last week or so I have been getting a false positive on a file called pbrush.exe on clamwin 096.5. I've checked it on Jotti and only clam shows it as a virus--w32-cih-1.
Last modified Saturday, August 24, 1996, 11:11:10 AM, 4,608 bytes.
Is this the way to report it, or shall I upload it somewhere?
Thanks!
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Sat Jan 29, 2011 7:36 pm |
|
 |
 |
 |
 |
Clam AV furnishes the scan engine and signature database used by ClamWin. You can upload both false positive files and undetected virus files to Clam AV starting at https://www.clamav.net/lang/en/sendvirus/ on the web. When you get to the upload form, be sure to label the file correctly--either a false positive or virus. Provide additional detail in the comments block.
Regards,
|
|
dgermann
Joined: 21 Mar 2010 |
Posts: 0 |
|
|
 |
Posted: Sat Jan 29, 2011 7:42 pm |
|
 |
 |
 |
 |
Thanks, Bob! Will do.
:- Doug.
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Sun Jan 30, 2011 5:40 am |
|
 |
 |
 |
 |
You are welcome, Doug. You can also upload questionable files to Virus Total or Jotti on the web. Either service will scan a file for free with multiple AV programs, including Clam AV. If several other AV programs say a file is infected, you can probably believe it. I like to see at least 5 AVs verify an infection, and I like to see them include Avast, Bit Defender, or Kaspersky.
Regards,
|
|