On Thu, May 15, 2014 at 12:34 AM, Julian Hansmann wrote: > > > Am 15.05.2014 09:11, schrieb Al Varnell: >> On Thu, May 15, 2014 at 12:04 AM, Julian Hansmann wrote: >>> thank your very much for your responses. I added the signatures >>> name to the whitelist which works flawless. >> >> The signature was removed almost immediately after the >> announcement, so you should no longer need the whitelist. > > Unfortunately I doubt that: > > $ sudo freshclam > ClamAV update process started at Thu May 15 09:31:47 2014 > main.cvd is up to date (version: 55, sigs: 2424225, f-level: 60, > builder: neo) > daily.cld is up to date (version: 18987, sigs: 953271, f-level: 63, > builder: neo) > bytecode.cvd is up to date (version: 236, sigs: 43, f-level: 63, > builder: dgoddard) > > $ clamscan test.eml > test.eml: Email.Trojan-417 FOUND > > $ clamscan -d ../ignore.ign2 test.eml > test.eml: OK
So it is. I could swear I checked Tuesday afternoon and couldn’t find it, but it’s there now. Perhaps I was confusing it with one of the other two FP’s I’m tracking. One is gone, but I’m still waiting on the second one to be modified. -Al- -- Al Varnell Mountain View, CA _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
