I’m not an expert on this, but it seems to be that by definition “Heuristic” detections cannot be false positives. They aren’t positive at all, just warnings of something suspicious. They don’t match any specific signature and are handled by a separate heuristics engine.
BTW, in scanning the file with ClamXav (OS X) I don’t get any kind of detection. -Al- -- Al Varnell Mountain View, CA On Oct 8, 2013, at 8:39, Sebastian Cherlo <[email protected]> wrote: > Hello , i'm new in this list , i'll explain my configuration and my problem. > > I have a Centos 5.9 server with ClamAV 0.98/17947 with c-icap working > together with squid 3.1.20 , i use the official database and every hour i do > a freschclam by cron. > There is a file > (http://central.maven.org/maven2/net/java/dev/jna/jna/3.4.0/jna-3.4.0.jar) > that is being detected as a heuristic broken executable but when i try to > send it like a false positive the official web page says that do no detect > anything , that i must update my database (is up to date) or if i use a not > official database i must contact the author (i use the official database) , > what is the problem? how can i fix it? > thanks, i'll wait your answer. > > -- > > Mariano Sebastian Cherlo > Administrador de Redes e Internet > Gerencia de Sistemas > (54)11 6009-1600 Int:9101 > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > http://www.clamav.net/support/ml _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
