On Sun, 5 Jun 2005 15:33:24 +0300 Odhiambo Washington <[EMAIL PROTECTED]> wrote:
> Hello users, > > On my home network, all http traffic is transparently passed through > DansGuardian, which uses clamd to scan any downloads for viruses. > I am running ClamAv CVS on the home router, which is just a FreeBSD > box giving "controlled" access to all the services my neighbours would > ever want to use. Such controls involve virus scanning and content > filtering. > > Today, I received the following notification after clamd decided that > a download was a Broken Executable. This download happens to be from > Microshit servers, yes? > > I manually downloaded the file in question and as much as I can > attest, > it is not broken. It ran without any problem and it's a legit M$ file. > > So I am thinking here is a case of an FP from clamd. Ideas?? The file is not marked as a broken executable on my x86 debian box. Please send me a full output of clamscan --debug badfile.exe -- oo ..... Tomasz Kojm <[EMAIL PROTECTED]> (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Sun Jun 5 15:12:36 CEST 2005
pgpPm8SANDvnO.pgp
Description: PGP signature
_______________________________________________ http://lurker.clamav.net/list/clamav-users.html