Because a VirusTotal scan results in only Clamav (1/42) marking it as infected.
On Mon, Aug 27, 2012 at 4:29 PM, Alain Zidouemba <azidoue...@sourcefire.com> wrote: > In the RF822 message that you sent in, found: > > "An Excel Formula Macro Virus (XF.Classic)) > Hydrocodone/APAP 10-650 For Your Computer > (C) The Narkotic Network 1998 > **Simple Payload** > **Set Our Values and Paths**5 > **Add New Workbook, Infect It, Save It As Book1.xls** > **Infect Workbook**". > > > Why do you think it's a false positive? > > > - Alain > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
