|
cousinscuzzy
| Joined: 06 Aug 2007 |
| Posts: 0 |
|
|
|
 Posted: Mon Aug 06, 2007 12:03 pm |
|
 |
 |
|
|
After updating my virus definitions last night, ClamWin detects W32.Virut-1 in three files associated with Cygwin:
bash.exe
sh.exe
bash-3.2.15-13.tar.bz2
I'm certain this is a false positive. Please let me know if there's a better way to report this or more information I can provide
Thanks!
|
|
|
|
GuitarBob
| Joined: 09 Jul 2006 |
| Posts: 9 |
| Location: USA |
|
|
| Posted: Mon Aug 06, 2007 1:16 pm |
|
|
|
|
|
The best way to handle a false positive is to let the people at ClamAV who maintain the signatures know about it. Go to https://cgi.clamav.net/sendvirus.cgi on the web to upload the file(s) and tell them. They will update the signature(s) if necessary to exclude false positives.
I always like to check out the file(s) at https://www.virustotal.com/ with VirusTotal first. VT will check files for free against 30 antivirus programs. If a couple of other antiviruses besides Clam spot a virus, it's probably not a false positive.
Regards,
|
|
|
