Hi, I don't have a copy of the file yet but there appears to be an FP on the definition for Trojan.Dropper-9173.
The sig makers could take a look at it now or wait for me to receive the offending file from the client. Regards, Rick _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml