Subj : Infection
To : Roger Nelson
From : Janis Kracht
Date : Tue May 30 2017 01:19 pm
> On Mon May-29-2017 21:08, Ben Ritchey (1:393/68) wrote to Joe Delahaye:
>> * An ongoing debate between Joe Delahaye and Ben Ritchey rages on
>> ...
>>> DB399SRD.ZIP: Win.Virus.Virut-5914242-0 FOUND
>>> This file has been submitted to ClamAV.Net as a false-positive.
>>> Until this has been verified, SR13 has been quarantined. Better
>>> safe than sorry, right?
>> I guess you missed the earlier message on this. Its quite safe, and a
>> false positive. AVG saw nothing wrong with it, nor did Windows
>> Defender.
>> Nope, Quarantined until ClamAV verifies it either way :)
> Then how would you explain that it is still available on filegate?
It is online here because I tested the file to my satisfaction given a
different Linux tool named sigtool. Ben owns his own system and he has decided
to wait until he hears from ClamAv. That is his choice, correct?
