Slammer false positive?

Discussion in 'malware problems & news' started by masqueofhastur, Dec 3, 2005.

Thread Status:
Not open for further replies.
  1. masqueofhastur

    masqueofhastur Registered Member

    Joined:
    Nov 19, 2005
    Posts:
    109
    I just downloaded the Windows OneCare Live Beta and it turned up a report that I had the Slammer worm in one of my BlackICE .enc files (evd001.enc). I uploaded the file to Jotti's malware scan, and AntiVir and Avast reported it as the Slammer worm as well. I scanned the file with Nod32 and Ewido and both turned up nothing. Jotti's said that AntiVir and Avast turn up more fals positives than most. Should I assume that it is a false positive?
     
  2. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    Black Ice being an IDS probably has something in it's signature for slammer that is triggering this false positive.

    Regards,

    CrazyM
     
Thread Status:
Not open for further replies.