Mailing List Archive: ClamAV: win32

False positives

Index | Next | Previous | View Threaded

cyaugin at yahoo

Mar 3, 2008, 6:25 AM

Post #1 of 3 (442 views)
Permalink

False positives

Hi all, I'm not sure if or where to report false positives. In particular, Clam is picking up the latest DOSBox (0.72) installer and uninstaller as containing zlob trojan. VirusTotal.com says that Clam is the only AV that is marking it as a virus, so I'm guessing it is a FP.

---------------------------------
Looking for last minute shopping deals? Find them fast with Yahoo! Search.
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

njh at bandsman

Mar 3, 2008, 6:39 AM

Post #2 of 3 (400 views)
Permalink

Re: False positives [In reply to]

> Hi all, I'm not sure if or where to report false positives.

www.clamav.net
Click on "submit a file".
Choose "submission form".
File in the form.
Ensure you choose the "A false positive" option.

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

sarocet at gmail

Mar 3, 2008, 8:03 AM

Post #3 of 3 (406 views)
Permalink

Re: False positives [In reply to]

Kevin Chen wrote:
> Hi all, I'm not sure if or where to report false positives. In particular, Clam is picking up the latest DOSBox (0.72) installer and uninstaller as containing zlob trojan. VirusTotal.com says that Clam is the only AV that is marking it as a virus, so I'm guessing it is a FP.
Go to http://cgi.clamav.net/sendvirus.cgi and mark it as a False positive.

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com