Alain (and others), A month later and I am experiencing similar problems.
Worm.Bagle.F-zippwd-6 instead of -7. The 'sigtool' output for both -6 and -7 appears to be identical minus a single ^M at the end of a line., but my take on it is, surely the presence of the word 'pass' followed by an encrypted zip file, is far too vague? Are we the only people having issue with this? Sadly in this last case, I don't have a copy of the false-positive (blocked!) so I have nothing to submit to Clam, at this stage. In many cases the emails are coming to our platform from third parties, and it's very difficult to get the raw original.... Thanks Mark. On 24/08/12 23:07, Alain Zidouemba wrote: > Mark, > > Sorry for the longer than usual turn-around. I will look into your FP > submission and get back to you in the next few hours. > > -Alain > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml > _____________________________________________________________________________ This email has been filtered by SMX. For more information visit smxemail.com _____________________________________________________________________________ _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
