[clamav-users] False positive -- I hope

[Steve Basford]

>
> I *think* that this signature flags *all* zipped JS files, and (IIRC)
> both Firefox and Thunderbird have JS-containing JAR files. I hope that
> is all it is.
>
>
Yep that's it.

Foxhole_filename. Foxhole_all. Foxhole_generic and Foxhole_js all have 
different fp levels...depending on what your see your risks as.

Cheers,

Steve
Twitter: @sanesecurity