[sanesecurity] Re: crdfam.clamav.hdb FP

  • From: Steve Basford <steveb_clamav@xxxxxxxxxxxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Wed, 24 Nov 2010 20:49:37 +0000



Jack Bailey wrote:
Hello,

I've had the new database crdfam.clamav.hdb installed and running, and it's only caught 2 messages so far, both FPs. The sig is CRDF.Malware.Win32.PEx.330838394.

Hi Jack,

Thanks for the report.

This is the entry:
ad4b0f606e0f8465bc4c4c170b37e1a3:43:CRDF.Malware.Win32.PEx.330838394

Which VirusTotal shows:
http://www.virustotal.com/file-scan/report.html?id=cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda-1290431458

As per this page: http://www.sanesecurity.com/clamav/fps.htm, please could you forward to: false_positive-AT-crdf.fr

Cheers,

Steve
Sanesecurity

Other related posts: