On Fri, 10 Dec 2004 16:41:45 -0600 dale <[EMAIL PROTECTED]> wrote:
I should have mentioned my OS (sorry about that). I am using
Linux (SME server 6.0.1). I have mounted the iso and no files within the iso
fail (see below for details). I have also googled and found 2 other potential false positives with this signature and with iso files (see urls below).
Please save this line to a test.ndb file:
Trojan.URLspoof.gen:3:*:6c6f636174696f6e2e687265663d756e657363617065282 *3a2f2f*25303140*2729
run `clamscan -d test.ndb` on problematic files and post the result here.
Because I was curious and FYI...
I stripped out the line wrap/white space from your post and tried it here and got:
$ clamscan -d test.ndb
LibClamAV Error: cli_hex2si(): Malformed hexstring: 6c6f636174696f6e2e687265663d756e657363617065282 (length: 47)
LibClamAV Error: cli_parse_add(): Problem adding signature (2).
LibClamAV Error: Problem parsing signature at line 1
LibClamAV Error: Problem parsing database at line 1
LibClamAV Error: Malformed database file test.ndb
ERROR: Malformed database
Summary blah blah blah
Solaris 9 on Sparc, ClamAV 0.80
dp _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
