Eric Rostetter wrote:
I recently
had a false positive also (a base64 encoded pdf string that happened
to match on a certain drug name). But, the FP rate is probable about
1 per year, so all in all not bad at all if you either reject
them or quarantine them (as opposed to tossing them in the bit-bucket).
Hi All,
Thanks for all the feedback... just a reminder if you do receive a FP,
please report.
Here's the main FP reporting page:
http://www.sanesecurity.com/clamav/fps.htm <file:///D:/DCIM/101_PANA>
Cheers,
Steve
Sanesecurity
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
