Randal, Phil wrote:
Don't know when this started happening, but ClamAV is misidentifying the Zafi worm as Trojan.Downloader.Small-1004.
I'm investigating this.I believe that signature small-1004 is matching some sort of PE packer/obfuscater and must be updated to avoid detecting unrelated malware.
Best regards, Diego d'Ambra
_______________________________________________ http://lurker.clamav.net/list/clamav-users.html