[sanesecurity] Re: FP on Sanesecurity.Malware.10794.UNOFFICIAL

  • From: Steve Basford <steveb_clamav@xxxxxxxxxxxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Mon, 04 Jan 2010 19:11:08 +0000



micah wrote:
Hi, 
the signature Sanesecurity.Malware.10794 found in phish.ndb decodes to a
domain which is probably legitimate to block as a malware source,
however it is being too aggressive and blocking other domains that are
not exactly that specific domain. 
Hi,

Thanks for the FP report.

I've seen the problem and removed the signature.

Sorry for any problems caused.

Cheers,

Steve
Sanesecurity

Other related posts:

  1. Home
  2. sanesecurity
  3. Archive
  4. 01-2010