Slammer false positive?

Discussion in 'malware problems & news' started by masqueofhastur, Dec 3, 2005.

Thread Status:
Not open for further replies.
  1. masqueofhastur

    masqueofhastur Registered Member

    Joined:
    Nov 19, 2005
    Posts:
    109
    I just downloaded the Windows OneCare Live Beta and it turned up a report that I had the Slammer worm in one of my BlackICE .enc files (evd001.enc). I uploaded the file to Jotti's malware scan, and AntiVir and Avast reported it as the Slammer worm as well. I scanned the file with Nod32 and Ewido and both turned up nothing. Jotti's said that AntiVir and Avast turn up more fals positives than most. Should I assume that it is a false positive?
     
  2. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    Black Ice being an IDS probably has something in it's signature for slammer that is triggering this false positive.

    Regards,

    CrazyM
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.