Christopher X. Candreva wrote:
On Fri, 3 Feb 2006, Diego d'Ambra wrote:
I'm investigating this.
I believe that signature small-1004 is matching some sort of PE
packer/obfuscater and must be updated to avoid detecting unrelated malware.
Personally, I'm not as interested in naming the viruses
On Fri, 3 Feb 2006, Diego d'Ambra wrote:
> I'm investigating this.
>
> I believe that signature small-1004 is matching some sort of PE
> packer/obfuscater and must be updated to avoid detecting unrelated malware.
Personally, I'm not as interested in naming the viruses as much as blocking
them.
Randal, Phil wrote:
Don't know when this started happening, but ClamAV is misidentifying the
Zafi worm as Trojan.Downloader.Small-1004.
I'm investigating this.
I believe that signature small-1004 is matching some sort of PE
packer/obfuscater and must be updated to avoid detecting unrelated m
