[sanesecurity] Re: False positives with MBL_346112.UNOFFICIAL
- From: Ricardo Stella <stella@xxxxxxxxx>
- To: "sanesecurity@xxxxxxxxxxxxx" <sanesecurity@xxxxxxxxxxxxx>
- Date: Wed, 21 Aug 2013 23:14:28 -0400 (EDT)
By the time I found out the new sig was pushed... Ugh... Now the who/how/where
starts... Many messages got whacked...
---
°(((=((===°°°(((================================================
On Aug 21, 2013, at 7:01 PM, Vincent Fox <vbfox@xxxxxxxxxxx> wrote:
> At uc Davis we disabled malware patrol entirely this afternoon.
>
> Initial fixes to ignore certain signatures were insufficient.
>
> Sent from my iPhone
>
> On Aug 21, 2013, at 14:48, Ricardo Stella <stella@xxxxxxxxx> wrote:
>
>>
>> I'm getting some false positives with this sig. What's the quickest way for
>> me to whitelist it without having to disable the whole db?
>>
>> Thanks in advance...
>>
>> ---
>> °(((=((===°°°(((================================================
>
Other related posts:
