Re: [Clamwin-users] False Positives

[Robert C W. <wit...@sb...>]

Hello jeroen,

Sunday, August 21, 2005, 4:53:33 PM, you wrote:

jt> If i were you i would try to replace the files with
jt> the original clean ones from a fresh install , and
jt> then scan again , see if that fixes the problem.
jt> Because to the update list of clamwin antivirus , it
jt> is definatley a virus , unfortunately there is no
jt> cleaning option in clamwin yet.

Yes, this is what I plan on doing, the next time I boot that
partition, but I have to tell you, I have a funny feeling that these
are going to prove to be false positives... that the clean files I
wind up reinstalling will wind up scanning positive too.

This whole computer was a clean install, and the viruses identified
are almost totally obscure... only two references of them even exist,
and one is ClamWin. This does have the smell of a possible false
positive false positive to me.

I will make sure to post my findings here, when I re-install the two
binaries that were allegedly infected, with clean files from the Win98
CD, and re-scan them.

I will also check file-sizes.

-wittig http://www.robertwittig.com/
.