[clamav-users] False positive, My program is recently Started to be flagged with Win.Dropper.Tinba-9943147-0

[G.W. Haywood]

Hi there,

On Sat, 9 Jul 2022, Al Varnell via clamav-users wrote:

> ...
> ----------- SCAN SUMMARY -----------
> Known viruses: 12318966
> Engine version: 0.104.1
> ...
> ... it would appear that there is a valid False Positive entry in
> the database for four different files ...
> ...
> So why it's being detected remains a mystery!

A guess: I see you're still using 0.104.1, maybe upgrade your ClamAV?

|| https://blog.clamav.net/2022/03/clamav-01050-release-candidate-now.html
|| 
|| "Fixed an issue causing byte-compare sub-signatures to cause an alert
|| when they match even if other conditions of the given logical
|| signatures were not met."

-- 

73,
Ged.