Hello, i'm seeing the same issue on bunch of linux servers(centos5, ubuntu-10.04). For example, it found PHP.Exploit.CVE_2011_4153-2 in freepbx tar.gz archive http://mirror.freepbx.org/freepbx-2.8.0.tar.gz but if i untar tar.gz and scan the content of archive it can not find anything.
Thank you. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
