Re: [clamav-users] XF.Sic.E False positive

2012-08-27 Thread polloxx
Because a VirusTotal scan results in only Clamav (1/42) marking it as infected. On Mon, Aug 27, 2012 at 4:29 PM, Alain Zidouemba wrote: > In the RF822 message that you sent in, found: > > "An Excel Formula Macro Virus (XF.Classic)) > Hydrocodone/APAP 10-650 For Your Computer > (C) The Narkotic N

Re: [clamav-users] XF.Sic.E False positive

2012-08-27 Thread Alain Zidouemba
In the RF822 message that you sent in, found: "An Excel Formula Macro Virus (XF.Classic)) Hydrocodone/APAP 10-650 For Your Computer (C) The Narkotic Network 1998 **Simple Payload** **Set Our Values and Paths**5 **Add New Workbook, Infect It, Save It As Book1.xls** **Infect Workbook**". Why do yo