Re: [Clamav-users] False positive in rar-packed executable file

2010-09-14 Thread Peter Walter
On 9/14/2010 12:00 PM, Tomasz Kojm wrote: On Tue, 14 Sep 2010 11:35:28 -0400 Peter Walter wrote: This is my first time posting to this list, so, please be gentle. I have a Windows executable created by WinRAR 3.93 in their SFX format. ClamAV engine 0.95.3 running on Linux consistently dete

Re: [Clamav-users] False positive in rar-packed executable file

2010-09-14 Thread Tomasz Kojm
On Tue, 14 Sep 2010 11:35:28 -0400 Peter Walter wrote: > This is my first time posting to this list, so, please be gentle. > > I have a Windows executable created by WinRAR 3.93 in their SFX format. > ClamAV engine 0.95.3 running on Linux consistently detects the signature > for DOS.Form.a in th

[Clamav-users] False positive in rar-packed executable file

2010-09-14 Thread Peter Walter
This is my first time posting to this list, so, please be gentle. I have a Windows executable created by WinRAR 3.93 in their SFX format. ClamAV engine 0.95.3 running on Linux consistently detects the signature for DOS.Form.a in the file. Unpacking the executable and then scanning the files w