Hello Benny!

Monday December 04 2017 06:03, you wrote to Ward Dossche:

 VC>>> Clamav (0.99.2) has reared its head again and found a false
 VC>>> posative for this release.

 VC>>> This is with an up to date version of the virus files etc.

 WD>> I would say to either live with it or dump Clamav ...

 > wow

 > Vince what virus name ?

 > put that virus signature name in local.ign2 it must be the exact virus
 > name if official sigs used only

 > sigtool --unpack-current=daily

 > see file that ends with ign2 for syntax


That did not do a thing really :

When running clamscan *.ZIP I get :

--
DB399GRG.ZIP: Win.Virus.Virut-5914242-0 FOUND
DB399SRG.ZIP: Win.Virus.Virut-5914242-0 FOUND
--

So I put 'Win.Virus.Virut-5914242-0' into file local.ign2

then ran sigtool --unpack-current=daily

Then looked at daily.ign2 with search for above name starting with WIN.Virus
with no results.

In fact there are no entries starting with Win.Virus

Then tried with sigtool --unpack-current=main
and looked at most of the files starting with 'main.' and also got nothing.

Not one starting with Win.Virus.Virut



Vince

--- Mageia Linux v5.1/Mbse v1.0.7.4/GoldED+/LNX 1.1.501-b20150715