Re: [clamav-users] Win.Trojan.Ramnit FPs

2016-02-15 Thread Steve Basford
On Mon, February 15, 2016 11:22 am, Mark Allan wrote: > I'm still getting the email saying "your sample was empty", so I'm > posting here too. > > The Ramnit series of sigs is hitting a bunch of files which have been > resident on users' HDs and scanned as clean for many years. VT also > reports

[clamav-users] Win.Trojan.Ramnit FPs

2016-02-15 Thread Mark Allan
I'm still getting the email saying "your sample was empty", so I'm posting here too. The Ramnit series of sigs is hitting a bunch of files which have been resident on users' HDs and scanned as clean for many years. VT also reports ClamAV as the only vendor detecting an infection. To clear the