[sanesecurity] Re: False positive Sanesecurity.Jurlbl.Auto.8c755e1f4b0a15ee58be79596a4ee9dd

  • From: Tom Shaw <tshaw@xxxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Fri, 26 Jun 2009 11:31:42 -0400

At 4:04 PM +0100 6/26/09, Steve Basford wrote:

Wolfgang Zeikat wrote:

Hi,

a legitimate and wanted mail was hit here by
Sanesecurity.Jurlbl.Auto.8c755e1f4b0a15ee58be79596a4ee9dd


Fixed.
It also matches INetMsg.SpamDomain-2w.l-finance_com (Bill is looking at that at the moment)
This brings up a good point. Bill mentioned in another thread that he analyzed and found lots of dups across the distributed files.
Methinks that maybe an option for clamav-unofficial-sigs.sh might be to analyze and build a ign file to remove all dups except for a single instance. 

Tom

Other related posts:

  1. Home
  2. sanesecurity
  3. Archive
  4. 06-2009