[clamav-users] Latest samba source contains Win.Trojan.Qhost-106?

[Andrew McGlashan]

On 31/03/2016 5:32 AM, Alain Zidouemba wrote:
> Paul:
> 
> Thanks for reporting this FP. This will be fixed momentarily.

Is it really a false positive?

There has been a heads up that SAMBA code has a problem and that both
Microsoft and Samba are working on a solution that will be released on
the next patch Tuesday.....

That download could be part of this somehow, I don't know.  But it
shouldn't blindly be considered a FP, that's for sure!

> - Alain
> 
> On Wed, Mar 30, 2016 at 2:18 PM, Paul Kosinski <clamav-users at iment.com>
> wrote:
> 
>> I just downloaded samba-4.4.0.tar.gz (the latest) from samba.org, and,
>> after downloading via HTTPS, ClamAV (0.99.1/21479) reports that the gz
>> file contains Win.Trojan.Qhost-106. In particular, the single file
>> wintest.py in the subdirectory wintest is reported.

Kind Regards
AndrewM

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20160331/a9ba84ac/attachment.sig>