-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Am 15.05.2014 09:11, schrieb Al Varnell: > On Thu, May 15, 2014 at 12:04 AM, Julian Hansmann wrote: >> thank your very much for your responses. I added the signatures >> name to the whitelist which works flawless. > > The signature was removed almost immediately after the > announcement, so you should no longer need the whitelist.
Unfortunately I doubt that: $ sudo freshclam ClamAV update process started at Thu May 15 09:31:47 2014 main.cvd is up to date (version: 55, sigs: 2424225, f-level: 60, builder: neo) daily.cld is up to date (version: 18987, sigs: 953271, f-level: 63, builder: neo) bytecode.cvd is up to date (version: 236, sigs: 43, f-level: 63, builder: dgoddard) $ clamscan test.eml test.eml: Email.Trojan-417 FOUND $ clamscan -d ../ignore.ign2 test.eml test.eml: OK > >> I can see that sending an attachment with an double extension is >> somehow sensless and suspicious however I think you can't take >> that as a virus. We're using ClamAV for all our e-mail customers >> and we do enforce quite strict policies when it comes to viruses. >> That's why this fp caused some trouble. >> >> Do you lists fp removals in your database update mails? > > I have never seen a removal listed. > > > -Al- > Kind regards, - -- Julian Hansmann 1&1 Mail & Media GmbH Mail Application Security -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJTdG4OAAoJEHVYMAtA/pVmt8MIAIsXSAniTXI/n4h5uCAm+dn3 Hx5W9YDR3UnbS/1GyHieY+Q7xluhL/kNGWmjtRfe/lmAHONixHUzbVXRNLL1fzuS K3UFyjXTyHNTLV6gip7iRBcgW87sk7TuZWpJoHlXVLV6ZaTykR2xntG+/Vo3tTS/ NbArW8MTeAoH+qImDcc9qFyqUJSQHtLEjTwX5PPzBTfA3bb9zRxOQwTIF9ZsLTI7 ZyZGO8w6cr3wMkyt/vg5C6wX0Atp712Jc/nEVfpcpiLjvY6tKLwOY1qCmH9sqiAL toEPvfxUiuTR8ahZ8+N9O9HbzS7t+GUgCHlt+d7950GBRxRFlYxouSUe338vSCg= =E+Xo -----END PGP SIGNATURE----- _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
