[sanesecurity] Re: FP
- From: "Steve Basford" <steveb_clamav@xxxxxxxxxxxxxxxx>
- To: sanesecurity@xxxxxxxxxxxxx
- Date: Wed, 11 Jan 2017 14:04:24 -0000
On Wed, January 11, 2017 1:52 pm, Andrey M. Korobko wrote:
Hi guys!
Sanesecurity.Badmacro.Doc.EncDoc.v3.UNOFFICIAL
Hi Andrey,
Sig removed.
BTW, If you can send the FP sample to:
false_positive@xxxxxxxxxxxxxxxxxxx
I might be able to tweak the sig to avoid the FP (don't need the password
to the actual document though)
Thanks.
--
Cheers,
Steve
Twitter: @sanesecurity
Other related posts:
