Mailing List Archive: False positive with ml

Please submit this as a false positive report on clamav.net

Thanks
-matt

On Sun, Jan 11, 2009 at 3:08 PM, Markus Peloquin <markpeloquin@gmail.com>wrote:

> ClamWin reports that ml_ipod's 'Process.exe' is a virus
> (Trojan.Killproc-1). It is not a virus, but it does exhibit some
> suspicious behavior (the following post is by the primary developer of
> ml_ipod):
> http://forums.winamp.com/showthread.php?postid=2318907#post2319150
>
> This is with ml_ipod-3.06 (haven't checked previous versions). I've
> uploaded a copy here:
> http://pages.cs.wisc.edu/~markus/misc/ml_ipod-false_positive.tar.gz<http://pages.cs.wisc.edu/%7Emarkus/misc/ml_ipod-false_positive.tar.gz>
> _______________________________________________
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32
>

--
Matthew Watchinski
Sr. Director Vulnerability Research Team (VRT)
Sourcefire, Inc.
Office: 410-423-1928
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32