On Mon, 2004-06-21 at 16:05, Benjamin Sherman wrote: > I was wondering if false positives ever make it into the virus DB updates?
They do > Since the update on Jun18, all of my windows 2000 workstations with > Service Pack 4 are showing what I beleive to be false positives for > Worm.Lovgate.W-2. The file in question is "spoolsv.exe" and can be fond in: > C:\WINNT\System32 > C:\WINNT\System32\DllCache > C:\WINNT\ServicePackFiles\i386 (depending on how the service pack was > installed) Submit a copy of the affected file as a false positive at http://www.nervous.it/~nervous/cgi-bin/sendvirus.cgi BMRB International http://www.bmrb.co.uk +44 (0)20 8566 5000 _________________________________________________________________ This message (and any attachment) is intended only for the recipient and may contain confidential and/or privileged material. If you have received this in error, please contact the sender and delete this message immediately. Disclosure, copying or other action taken in respect of this email or in reliance on it is prohibited. BMRB International Limited accepts no liability in relation to any personal emails, or content of any email which does not directly relate to our business. ------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users