clamAV false posittive?

[RabbieBurns]

doing a scan of my NTFS partition, and clamAV has reported a number of infected files. Some of them are:

 

./WINDOWS/Installer/116930e9.msp: W32.Virut.Gen.D-163 FOUND

./WINDOWS/Installer/11693115.msp: W32.Virut.Gen.D-163 FOUND

./WINDOWS/Installer/5281a7e.msp: W32.Virut.Gen.D-163 FOUND

./WINDOWS/Installer/5281a95.msp: W32.Virut.Gen.D-163 FOUND

 

Are they real or false positives?

[Geoff]

You can find out by uploading them to virustotal and seeing what the results are.

 

VirusTotal - Free Online Virus and Malware Scan

 

If several AV scanners flag the files it's probably a real infection. If not then you should notify the ClamAV team about the false positives via their file submission process.

 

Clam AntiVirus

[RabbieBurns]

just had a swatch at the clamav forums and it would appear it is indeed a f.p.

 

cheers for the links