jesler at sourcefire
Jun 24, 2013, 7:33 AM
Post #2 of 3
(137 views)
Permalink
|
On Jun 22, 2013, at 6:33 AM, Daniel Quintiliani <danq [at] runbox> wrote:
> Hi,
>
> A long time ago, I used to occasionally submit false positives detected
> by ClamAV when they would show up. However, I have tried occasionally to
> submit these same two false positives in place for months now, and they
> are still being reported.
>
> 1. W6EL Propagation Prediction
> File: W6ELPropInst270.exe
> Description: Installer for ham radio software I have used for many
> years. Only the installer (and not any of the installed program files)
> is detected as a false positive.
> Official page: http://www.qsl.net/w6elprop/
> Detected as: Heuristic.Trojan.SusPacked.6173702D7374756666
>
> 2. Sleuth 2004
> File: Sleuth.exe
> Description: 2004 Windows remake of DOS murder mystery game.
> Official page: down
> Detected as: Win.Trojan.Vbiframe-143
>
> I try occasionally to submit these files, and they never seem to be
> accepted. I also check "Notify me" but the ClamAV team never gets back
> to me about this. Anyone know why the form hasn't accepted my
> submissions in months?
Can you send us the md5's of the files you submitted so we can take a look?
--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire
|
signature.asc
