GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Tue Apr 13, 2010 9:45 pm |
|
 |
 |
 |
 |
ClamWin Version .96 will notify users of false positives in the Windows directory with a message in the scan report and will not quarantine any Windows files. However, users seeing this message should still visit https://www.clamav.net/lang/en/sendvirus/ and upload false positive files so that Clam AV can permanently correct them. When you get to the upload form, be sure to change the type to False Positive and in the comments section, state that this is a false positive indicated by ClamWin and give the exact name of the false detection in the comments section.
This is none too soon, as Microsoft had another big Patch Tuesday today. There are usually some false positives on Patch Tuesday, as Microsoft files that have been previously "whitelisted" to correct prior false positives are patched and have new file hashes. While Windows directory files will not be quarantined (per above); Microsoft Office files (Excel, Word, Powerpoint, etc.) files may still be hit with false positives, so watch out for this and be sure to send any such false positive files to Clam AV for correcting per above.
Regards,
|
|