Re: [Clamav-users] Suspect.Zip

2008-04-22 Thread Jan-Pieter Cornet
On Mon, Apr 21, 2008 at 11:45:39PM +0200, Jan-Pieter Cornet wrote: > One of my customers is reporting that a file is being blocked as > "Suspect.Zip". I haven't got a copy of the file itself, however, > I started looking for the virus signature (as it is definately a > false positive), but found no

[Clamav-users] Suspect.Zip

2008-04-21 Thread Jan-Pieter Cornet
One of my customers is reporting that a file is being blocked as "Suspect.Zip". I haven't got a copy of the file itself, however, I started looking for the virus signature (as it is definately a false positive), but found none. Completely undocumented, I found code in libclamav/unzip.c that trigge