Hi, > There was some discussion about this particular signature on the > Sanesecurity list. Archives here: > http://news.gmane.org/gmane.comp.security.virus.clamav.sanesecurity > > This signature is provided by Malware Patrol. Apparently, originally the > signature matched the string "updat", which understandably caused quite a > number of false positives. Later, the signature was replaced with it's > current value. > > Don't spend too much time trying to debug it now, because the signature has > changed.
Thanks everyone for the information. I thought for sure it was that I was doing something wrong, which is why I didn't google it first. I'll also start a new thread next time; I didn't think it would be associated with that old thread any longer for the very reason that it was so old. I also thought it was more of an issue of how to use the commands to trace a signature that was my issue, certainly not that a signature ID had been re-purposed. Thanks again, Alex _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
