Re: [Clamav-users] False positive on Worm.Gibe.F

2004-04-27 Thread Rob MacGregor
From: Tomasz Papszun <[EMAIL PROTECTED]> This is an intended behaviour. There was a long discussion in September 2003 whether we should detect (and block) damaged samples of Worm.Gibe.F. In the end we decided: yes. Such messages, though not containing executable viruses, are the result of the viru

Re: [Clamav-users] False positive on Worm.Gibe.F

2004-04-27 Thread Tomasz Papszun
On Mon, 26 Apr 2004 at 18:36:18 +0100, Rob wrote: > I'm seeing a number of false positives on Worm.Gibe.F using clamav-0.70 > fully up to date (on FreeBSD 5.2-CURRENT). I've scanned the apparent > hits using up to date Kaspersky, F-Prot and Sophos and none find > anything. This is probably becaus

[Clamav-users] False positive on Worm.Gibe.F

2004-04-26 Thread Rob
I'm seeing a number of false positives on Worm.Gibe.F using clamav-0.70 fully up to date (on FreeBSD 5.2-CURRENT). I've scanned the apparent hits using up to date Kaspersky, F-Prot and Sophos and none find anything. This is probably because they've already been cleaned along the way :) If I unpa