On 2008-03-18 10:34, [EMAIL PROTECTED] wrote: > On a test server after a very long period of not detecting anything CLAM > AV started reporting that it was seeing: > > /clamscan/servers/mudlake/opt/Dave/nmap-4.03.tgz: Trojan.Spy-27244 FOUND > /clamscan/servers/mudlake/opt/Dave/nmap-4.03/mswin32/winpcap/Packet.dll: > Trojan.Spy-27244 FOUND > /clamscan/servers/mudlake/opt/Dave/nmap-4.03/mswin32/winpcap/WanPacket.dll: > Trojan.Spy-27239 FOUND > > and: >[...] > The files in these directories are unchanged since 2006 so I'm curious if > this might be a false positive. [...]
When in doubt, I submit the files to www.virustotal.com and see what other AV-programs think about the file. -- Paul Bijnens, xplanation Technology Services Tel +32 16 397.511 Technologielaan 21 bus 2, B-3001 Leuven, BELGIUM Fax +32 16 397.512 http://www.xplanation.com/ email: [EMAIL PROTECTED] *********************************************************************** * I think I've got the hang of it now: exit, ^D, ^C, ^\, ^Z, ^Q, ^^, * * F6, quit, ZZ, :q, :q!, M-Z, ^X^C, logoff, logout, close, bye, /bye, * * stop, end, F3, ~., ^]c, +++ ATH, disconnect, halt, abort, hangup, * * PF4, F20, ^X^X, :D::D, KJOB, F14-f-e, F8-e, kill -1 $$, shutdown, * * init 0, kill -9 1, Alt-F4, Ctrl-Alt-Del, AltGr-NumLock, Stop-A, ... * * ... "Are you sure?" ... YES ... Phew ... I'm out * *********************************************************************** _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html