Getting this too. On jar files from a Oracle Weblogic server. I suspect this is another false positive, along the lines of the "'Win.Trojan.Bancos-2115" problem last week.
-----Original Message----- From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Ted Gilchrist Sent: Tuesday, February 16, 2016 7:34 AM To: clamav-users@lists.clamav.net Subject: [clamav-users] How do I tell if MacroDoubleExtension-zippwd is for real I am getting a Zip.Suspect.MacroDoubleExtension-zippwd FOUND when I run clamscan on a jar file. However, when I extract the jar file, and run clamscan on the contents, the scan comes out clean. How do I determine whether this error is for real? From Googling around, I get the impression that this could be a false positive, but I don't know for sure. Also, I'd appreciate a workaround to avoid triggering this error. -- "Speech, not just for humans" http://www.google.com/profiles/egilchri about.me/ted.gilchrist _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml