False virus warning by F=Prot?

[Rob v. Albada]

Hi,

A long time user of F-Prot, today I received the first virus warning
in a long time.
According to F-Prot, ten files are infected with the IRC/Factor.A
virus.
However, nothing seems to be wrong with any of these ten files.
They are all frequency files, with extension .FRQ, .FR0 or none.
They are lists of (Javanese or Indonesian) words with their
frequency in a given text. (The '@' i the texts stands for a mute
'e'.)
No control codes are used except 0D0A (carriage return and newline).

This is a part of such a file:

anakmu 2
andhani 2
andhukan 1
ane 1
anek 1
ang@t 1
ang@tang@t 1
angg@r 9
angg@re 8
angl@r 2
angl@re 1
ani 5
anik 1
ant@mi 1
anu 24
anune 1

[et cetera]


It riddles me why F-Prot designates these files as infected.
Also, strangely enough, other frequency files of the same structure
and with the same extensions are not indicated as infected.
As far as I know, IRC/Factor.A is a new virus.

Can anyone please explain???

My computer is a unbranded PC with Win98SE.


TIA,

Kind regards,

Rob van Albada, Amsterdam.

 

[sigurdur.rafn]

Hi,

A long time user of F-Prot, today I received the first virus warning
in a long time...

Try updating your definition files, if this is because of them it has
probably already been fixed in later versions.

 

[Buddy B]

Hi,

A long time user of F-Prot, today I received the first virus warning
in a long time.
According to F-Prot, ten files are infected with the IRC/Factor.A
virus.
However, nothing seems to be wrong with any of these ten files.
They are all frequency files, with extension .FRQ, .FR0 or none.
They are lists of (Javanese or Indonesian) words with their
frequency in a given text. (The '@' i the texts stands for a mute
'e'.)
No control codes are used except 0D0A (carriage return and newline).

This is a part of such a file:

anakmu 2
andhani 2
andhukan 1
ane 1
anek 1
ang@t 1
ang@tang@t 1
angg@r 9
angg@re 8
angl@r 2
angl@re 1
ani 5
anik 1
ant@mi 1
anu 24
anune 1

[et cetera]


It riddles me why F-Prot designates these files as infected.
Also, strangely enough, other frequency files of the same structure
and with the same extensions are not indicated as infected.
As far as I know, IRC/Factor.A is a new virus.

Can anyone please explain???

My computer is a unbranded PC with Win98SE.


TIA,

Kind regards,

Rob van Albada, Amsterdam.

Write Fprot support and tell them and ask if they want the affected files,
(zipped).
I think there is a specific address they want used to send.
Regards Buddy B

 

[Rob v. Albada]

The definition files are updated daily. Nothing wrong with those.

Kind regards,

Rob.

Op 22 Dec 2004 02:51:46 -0800, (e-mail address removed) schreef:

 

[Rob v. Albada]

The problem has been fixed.
Yesterdays report (which I read only one hour ago) did not mention any
infected file.
I checked again this morning, and again no infections.

Thanks for your suggestion,
kind regards,

Rob van Albada, Amsterdam.