I have a 4.5Mb Setup executable that clamav thinks is Trojan.Zappa
It was on a users workstation (who runs up-to-date Sophos), is dated Jan 2003, and Sophos, Trend, Panda and BitDefender all don't detect any problem with it - so I think it's a False Positive.
I've tried uploading it via sendvirus.cgi - it appeared to work but died after uploading 1M (can someone update that submission form to state the 1M limit before you submit? Waiting around for 5 minutes on my home DSL link to have it fail on me isn't my idea of fun ;-)
Does one of the ClamAV people want a copy? An e-mail address or FTP server would appear to be the best compromise...
Thanks
Jason _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users