I've checked, and ping.ex_ matches every copy I have in the XP series, all Service Pack 3..

does not appear to be a virus..

(Also, would it be possible to add a restore file for viruses moved to the vault?)

I've already reported ping.exe (MD5 66cdf02d86c9f0b4300ee981a614d296) as a false positive. It should be corrected in an update within a few days.

ClamWin has a restore program called Quarantine Browser. You'll find it in Start menu > ClamWin Antivirus.

We should probably give Clam AV several days--say about 5 to correct false posiitves. Most Clam signatures are prepared automatically now, but false positives must be addressed manually. As far as I know, they only have one sigmaker addressing most of them on a part-time basis.

I report Windows system 32 false positives almost every night, and they are usually cleared by the end of the week.

I have been informed that in a future version, Clam will reduce false positive by utilizing valid digital signatures--similar to the way ClamWin now protects against Microsoft/Windows false positives.

Regards,