Mailing List Archive: False positives

False positives

Mar 3, 2008, 6:25 AM

Post #1 of 3 (2534 views)

Hi all, I'm not sure if or where to report false positives. In particular, Clam is picking up the latest DOSBox (0.72) installer and uninstaller as containing zlob trojan. VirusTotal.com says that Clam is the only AV that is marking it as a virus, so I'm guessing it is a FP.

---------------------------------
Looking for last minute shopping deals? Find them fast with Yahoo! Search.
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

Re: False positives [ In reply to ]

njh at bandsman

Mar 3, 2008, 6:39 AM

Post #2 of 3 (2416 views)

Permalink

> Hi all, I'm not sure if or where to report false positives.

www.clamav.net
Click on "submit a file".
Choose "submission form".
File in the form.
Ensure you choose the "A false positive" option.

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

Re: False positives [ In reply to ]

sarocet at gmail

Mar 3, 2008, 8:03 AM

Post #3 of 3 (2415 views)

Permalink

Kevin Chen wrote:
> Hi all, I'm not sure if or where to report false positives. In particular, Clam is picking up the latest DOSBox (0.72) installer and uninstaller as containing zlob trojan. VirusTotal.com says that Clam is the only AV that is marking it as a virus, so I'm guessing it is a FP.
Go to http://cgi.clamav.net/sendvirus.cgi and mark it as a False positive.

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32