Randal, Phil wrote:
Don't know when this started happening, but ClamAV is misidentifying the
Zafi worm as Trojan.Downloader.Small-1004.


I'm investigating this.

I believe that signature small-1004 is matching some sort of PE packer/obfuscater and must be updated to avoid detecting unrelated malware.

Best regards,
Diego d'Ambra
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to