kubuntu-7.10-desktop-i386.iso wubi-cdboot.exe: Adware.Fakealert-21 FOUND

[kubuntux]

Hi,

during periodic virus scan clamav found Adware.Fakealert-21 in file
wubi-cdboot.exe in the official kubuntu-7.10-desktop-i386.iso

To be sure, i have downloaded again the, iso, checked md5
(ae9b209fe4b9caf545fa2011631de797), verified the md5
file again digital signature 0xFBB75451: public key "Ubuntu CD Image Automatic Signing Key <cdimage@ubuntu.com>"

and all check are right!

What is this ?

A) A false positive of clamav ?
B) A sad case ?

[aged hippy]

Re: kubuntu-7.10-desktop-i386.iso wubi-cdboot.exe: Adware.Fakealert-21 FOUND

I don't know if this article has any bearing on the matter:

Antivirus firms are concerned about the emergence of techniques that could render meaningless the use of checksums to mark applications as safe.

The issue concerns hash functions - one way mathematical functions that produce a small fixed length checksum or message digest from a much longer batch of code or email message. When two different input values produce the same output value this is called a collision.

Weaknesses in hashing algorithms, such as MD5, that allowed the discovery of collisions much more quickly than would be possible using brute-force attacks have been known about by cryptographic researchers for more than three years.
http://www.theregister.co.uk/2008/01...de_camouflage/