Re: [Clamav-users] False positive

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Matthew Newton
Date:  
To: ClamAV users ML
Subject: Re: [Clamav-users] False positive
Hi,

Thanks both for the useful info.

On Fri, Oct 17, 2008 at 11:54:52AM +0100, Steve Basford wrote:
> I know this doesn't help... but...looks like that name is a "special" hard
> coded name:


On Fri, Oct 17, 2008 at 01:32:38PM +0200, Tomasz Kojm wrote:
> as a temporary solution you can run the following command:
>
> echo "0:0:ffffffff:DOS exe(or not):CL_TYPE_BINARY_DATA:CL_TYPE_MSEXE" > /usr/local/share/clamav/local.ftm
>
> (you may need to change the db path). This will change the way how some specific
> files are being handled (in your case we just don't want to handle them as
> CL_TYPE_BINARY_DATA). Also, we now have a bug entry for this problem:


That's great, thanks - all test files I have now scan OK.

Does the above alter much else in the scanning?

Many thanks,

Matthew


-- 
Matthew Newton, Ph.D. <>


Systems Architect (UNIX and Networks), Network Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <>
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml