In the RF822 message that you sent in, found: "An Excel Formula Macro Virus (XF.Classic)) Hydrocodone/APAP 10-650 For Your Computer (C) The Narkotic Network 1998 **Simple Payload** **Set Our Values and Paths**5 **Add New Workbook, Infect It, Save It As Book1.xls** **Infect Workbook**".
Why do you think it's a false positive? - Alain _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml