Benjamin Sherman said:
> I was wondering if false positives ever make it into the virus DB updates?
>
> Since the update on Jun18, all of my windows 2000 workstations with
> Service Pack 4 are showing what I beleive to be false positives for
> Worm.Lovgate.W-2. The file in question is "spoolsv.exe" and can be fond
> in:
> C:\WINNT\System32
> C:\WINNT\System32\DllCache
> C:\WINNT\ServicePackFiles\i386  (depending on how the service pack was
> installed)
>
> These machines exhibit none of the symptoms of the Lovgate family of
> virii except that ClamAV started picking them up after the database
> update on Friday Jun18.
>
> Any suggestions?
>

I'm seeing the same thing since sp4.  You are not alone.


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to