False positive?

[Q Section]

Hello Everyone
When we use Explorer and look in our Outpost Firewall ini file WormGuard shows the folowing:

Risk Assessment: Medium

*> Suspicious strings detected.
WormGuard has found a few strings in this file that are suspicious.

*> Contains suspicious string: virus
LINE=......

We have done a current scan with an up-to-date NOD32 and TDS3 but they show nothing out of the ordinary. We believe this is a false positive. We will be happy to send the small file (8K) but our zip program seems only to be able to unzip and not zip.

[Paul Wilders]

Hi QSection,

{QUOTE-> ...We believe this is a false positive. <-QUOTE}

No it isn't. This is the way WG functions by design; detecting - amongst others - suspicious strings.

In case you haven't done so, configure WG with the option to "safely view..." and press that button, and the contents of the file will be shown.

regards.

paul