Quoting Robert Harrison <[EMAIL PROTECTED]>: > I have file on my linux server called setup.exe which was placed on > there using samba. > > when scaned from windows over the network norton reports funlove.4099 > > when scanned using clamscan it reports that the file is clean. > > Using freshclam first and latest STABLE clamscan 0.54 > > anu ideas out there .... >
ClamAV's virus signature database is not as extensive and not updated as frequently as the commercial ones. Because of the rapidity of virus development, you should always treat a negative response as "no viruses found", not "there are no viruses". Even commercial databases can give false negatives. Last fall, my wife noticed an e-mail that looked odd. We bounced it to my Linux box and I opened it and compared it to descriptions of current viruses. It was a new Klez variant. A week later her McAfee Virus Scan On-line was updated and detected it. A month later, OpenAntiVirus was updated and detected it. So I'd treat it like a virus. HTH, Jeffrey --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
