On Thu, 16 Oct 2003 at 11:48:25 +0100, David Watson wrote: [...] > I have a false positive on: > Trojan.Stealth.D > (Clam)=c441a2d0f44000a1a8f54000890da4f440000fb70c904166890c90e999feffffb8e2feffff33c98bf68dbc > in viruses.db2 > > (Submission 560 I think)
That's right, thanks for precision. > It is from a pocket PC executable which is 4.29Mb zipped and I'm not > sure what to do next in order to update the signature Inform the database developers. The best: submit a file causing a false positive match via the normal way < http://clamav.sourceforge.net/cgi-bin/sendvirus.cgi >, clearly stating that you think that it's not infected file and it gives false positive about what virus. Oh, that was big. In such case the better can be not uploading the file but just informing us and we'll contact for a possible sample. > (particularly since I > don't have a sample of the actual virus). I'm happy to leave it as is as I > send the file via another route, I just thought I would at least mention it. Thank you very much for reporting this. We appreciate it. I've just replaced the signature with a more specific one. Just in case: please check whether the false alert is gone. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/ | ones and zeros. ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better services: Click here: http://sourceforge.net/supporters.php _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
