 | False positives - W32.Virut-1 |  |
cousinscuzzy
Joined: 06 Aug 2007 |
Posts: 0 |
|
|
 |
Posted: Mon Aug 06, 2007 12:03 pm |
|
 |
 |
 |
 |
After updating my virus definitions last night, ClamWin detects W32.Virut-1 in three files associated with Cygwin:
bash.exe
sh.exe
bash-3.2.15-13.tar.bz2
I'm certain this is a false positive. Please let me know if there's a better way to report this or more information I can provide
Thanks!
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Mon Aug 06, 2007 1:16 pm |
|
 |
 |
 |
 |
The best way to handle a false positive is to let the people at ClamAV who maintain the signatures know about it. Go to https://cgi.clamav.net/sendvirus.cgi on the web to upload the file(s) and tell them. They will update the signature(s) if necessary to exclude false positives.
I always like to check out the file(s) at https://www.virustotal.com/ with VirusTotal first. VT will check files for free against 30 antivirus programs. If a couple of other antiviruses besides Clam spot a virus, it's probably not a false positive.
Regards,
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
Powered by
phpBB © phpBB Group
Design by
phpBBStyles.com |
Styles Database.
Content © ClamWin Free Antivirus GNU GPL Free Software Open Source Virus Scanner. Free Windows Antivirus. Stay Virus Free with Free Software.