On Tue, Feb 17, 2004 at 11:44:39AM -0500, David A. Lee wrote: > For some reason beyond my understanding, ClamAV thinks this email contained the > "FunLove" virus > > >>>> X-Virus: W32.FunLove.4099 FOUND > > Maybe simply the words "Fun Lov" in the text ?
actually, it appears that the full text of: echo '_Fun Loving Criminal_' | sed 's/_/~/g' generates the hit. hrm. > > > > > Firstly, I'd like to say thank you for such a useful utility. > > > > My question concerns scanning a Windows partition from a Linux partition > > on the same drive. Running Clamav 0.65-3 on Debian based Libranet, scanned > > a WinME partition and came up with the report that FunLove.4099 had been > > found in several drivers (LAN I think). Looking through the files > > with MC turned up the text '_Fun Loving Criminal_' several times in each > > one. File creation date the same for each, August 13 2000. > > > > Why I'm unsure is that my free Windows anti-virus program never detected > > it. But I was unsure and downloaded the Symantec cleaning tool. It didn't > > find anything. > > > > Is there some inherent risk for false positives with scanning Windows from > > Linux? > > > > Thank you. > > > > Sam Miller > > > > > > > > > > ------------------------------------------------------- > > SF.Net is sponsored by: Speed Start Your Linux Apps Now. > > Build and deploy apps & Web services for Linux with > > a free DVD software kit from IBM. Click Now! > > http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click > > _______________________________________________ > > Clamav-users mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/clamav-users > > > > > > > > ------------------------------------------------------- > SF.Net is sponsored by: Speed Start Your Linux Apps Now. > Build and deploy apps & Web services for Linux with > a free DVD software kit from IBM. Click Now! > http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click > _______________________________________________ > Clamav-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/clamav-users -- [ Jim Mercer [EMAIL PROTECTED] +1 416 410-5633 ] [ I want to live forever, or die trying. ] ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
