On Tuesday 17 February 2004 4:18 am, Sam Miller wrote:

> Firstly, I'd like to say thank you for such a useful utility.
>
> My question concerns scanning a Windows partition from a Linux partition
> on the same drive. Running Clamav 0.65-3 on Debian based Libranet, scanned
> a WinME partition and came up with the report that FunLove.4099 had been
> found in several drivers (LAN I think). Looking through the files
> with MC turned up the text

I recommend you do not post to the ClamAV list, including text which is 
matched for a virus signature in your posting :)   Many of the subscribers 
will never see it because they are running ClamAV, and your email gets 
detected as a virus (I had to release my copy from MailScanner's quarantine 
before I could read what you had written).

> Why I'm unsure is that my free Windows anti-virus program never detected
> it. But I was unsure and downloaded the Symantec cleaning tool. It didn't
> find anything.
>
> Is there some inherent risk for false positives with scanning Windows from
> Linux?

No, there is no specific F-P risk associated with scanning Windows systems 
compared to any other.

Please could you tell us the names of the specific WinME files in which you 
found the text F-L-C (corrupted here to avoid triggering the ClamAV signature 
again), and perhaps supply MD5 hashes for them so anyone here who also has a 
WinME system (anyone?) can check to see if you have normal or trojaned 
versions of the files?

Regards,

Antony.

-- 
In Heaven, the police are British, the chefs are Italian, the beer is Belgian, 
the mechanics are German, the lovers are French, the entertainment is 
American, and everything is organised by the Swiss.

In Hell, the police are German, the chefs are British, the beer is American, 
the mechanics are French, the lovers are Swiss, the entertainment is Belgian, 
and everything is organised by the Italians.

                                                     Please reply to the list;
                                                           please don't CC me.



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to