[clamav-users] Win.Trojan.Genieo

[Al Varnell]

I believe this signature has been mislabeled as Windows only. The signature comes back as:

VIRUS NAME: Win.Trojan.Genieo
TARGET TYPE: MACHO
OFFSET: *
DECODED SIGNATURE:
okup__ZL20dtor_genieo_06041979v___tcf_0 stub 

which tells me it’s an OS X executable.

Since it’s neither a false positive or false negative, I wasn’t sure how to report it.


-Al-
-- 
Al Varnell
Mountain View, CA