[clamav-users] Win.Worm.Chir-553 False Positive

[Al Varnell]

I’ve just uploaded a component of every version OS X since at least 2010 that is included with Python and will undoubtedly be found by a lot of folks very soon.

File Name: wininst-8.0.exe
MD5: ed0fde686788caec4f2cb1ec9c31680c

VirusTotal comments would also indicate an FP
<https://www.virustotal.com/en/file/e362670f93cdd952335b1a41e5529f184f2022ea4d41817a9781b150b062511c/analysis/1405462000/>

Since the signature for this file is ee35353fd80f8e2447095b753732dbca, I guess I’m a bit confused as to why id doesn’t match the file MD5.


-Al-
-- 
Al Varnell
Mountain View, CA