[sanesecurity] FP on Sanesecurity.Malware.10794.UNOFFICIAL
- From: micah <micah@xxxxxxxxxx>
- To: sanesecurity@xxxxxxxxxxxxx
- Date: Mon, 04 Jan 2010 11:29:57 -0500
Hi,
the signature Sanesecurity.Malware.10794 found in phish.ndb decodes to a
domain which is probably legitimate to block as a malware source,
however it is being too aggressive and blocking other domains that are
not exactly that specific domain.
I'm afraid I cannot include the specific words in this email because
they will get blocked by the list, so instead, have a look at this URL
for the information:
http://micah.riseup.net/pastes/2010-01-04T112912
Thanks,
micah
ps - if there is a better way of reporting things like this, so that
they wont get blocked by the lists' application of these filters, please
let me know.
Other related posts:
