micosmiling
Joined: 11 Nov 2010 |
Posts: 0 |
Location: UK |
|
 |
Posted: Thu Nov 11, 2010 9:02 am |
|
 |
 |
 |
 |
Hi,
Where/who do we report false positives to. I've got Clamav reporting quite a few AVG files as Trojans
Thanks in advance and sorry for my ignorance if I've missed this somewhere.
Micosmiling
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Thu Nov 11, 2010 2:26 pm |
|
 |
 |
 |
 |
Clam AV furnishes the scanning engine and signature database used by ClamWin. You can report false positives to them, starting at https://www.clamav.net/lang/en/sendvirus/ on the web. When you get to the submission page, be sure to tick the false positive label and tell them the name of the virus that is falsely detected. They will correct/replace the signature usually within a couple of days.
Regards,
|
|
micosmiling
Joined: 11 Nov 2010 |
Posts: 0 |
Location: UK |
|
 |
Posted: Tue Nov 16, 2010 7:20 am |
|
 |
 |
 |
 |
Hi,
Thanks for that.
Do you get notified that it has beed rectified or they have been made aware and are dealing with it. (e.g. tracking)
Is there anywhere you can cut and paste the the virus information like an actually text file of the reporting log. The false positives of AVG are well long names.
Many thanks in advance.
Micosmiling.
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Tue Nov 16, 2010 1:29 pm |
|
 |
 |
 |
 |
When you fill out the upload form, you can tick a box to be notified when the false positive has been corrected. You will receive the entire list of all signatures prepared at the same time, however. Sometimes the list is very long, so you could miss your notice. I don't bother with looking myself. I just put a copy of the file involved in my quarantine folder and scan it with ClamWin every day until it is no longer detected. Then I delete it. That way, if it is still detected several days later, I can re-submit it. Each Clam sigmaker is responsible for his own false positives. Sometimes (not often) he can be away when the false positive is first submitted and miss it.
Regards,
|
|