The signature Win.Trojan.Agent-1812140 is causing a FP on an Italian Microsoft Office file from the mid-90s. I'm dropping the signature now.
Thanks Antonio for taking the time to report this despite no longer having access to the file that caused the FP. -Alain On Sat, Jan 21, 2017 at 11:38 AM, Antonio Piccolomini d'Aragona < antpiccda...@gmail.com> wrote: > Actually, there is a 1 less. It is Win.Trojan.Agent-1812140 (I looked in my > Mac Cronology...where I looked for some ways to fix) > > 2017-01-21 17:16 GMT+01:00 Alain Zidouemba <azidoue...@sourcefire.com>: > > > Antonio, > > > > Unfortunately, I can't find any record of us having ever published > > Win.Trojan.Agent-18112140. > > Could the name of the signature that caused the FP be slightly different? > > > > Alain > > > > On Sat, Jan 21, 2017 at 9:07 AM, Antonio Piccolomini d'Aragona < > > antpiccda...@gmail.com> wrote: > > > > > Hi, > > > I'm writing for the following problem. > > > > > > After sudo freshclam, I had a scan of my system (UBUNTU 12.04 LTS) by > > sudo > > > freshclam -r. ClamAv detected an infection relative to an ISO built > from > > a > > > Windows 95 installation CD. The signaled virus was said to be a > > > Win.Trojan.Agent-18112140. Previous scans never reported infected files > > > (although the ISO has always been there). I submitted the file to the > > > VirusTotal online scan; there too, ClamAv reported the > > > Win.Trojan.Agent-18112140, being anyway the only in doing so (for all > the > > > other checks the file was ok). Unfortunately, as I am moving and needed > > > have the computer with UBUNTU 12.04 turned into Windows, I formatted > and > > > lost the incriminated file. So, I could not report the (potentially) > > false > > > positive to the ClamAv site. I just wanted to ask you whether I can be > > > sure, or should worry; I use computer for work, and handle important > > datas, > > > so I would like to be sure that that was actually a false positive (or > in > > > which percentage it might be). > > > > > > Thank you! > > > > > > Antonio > > > _______________________________________________ > > > clamav-users mailing list > > > clamav-users@lists.clamav.net > > > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > > > > > > > Help us build a comprehensive ClamAV guide: > > > https://github.com/vrtadmin/clamav-faq > > > > > > http://www.clamav.net/contact.html#ml > > > > > _______________________________________________ > > clamav-users mailing list > > clamav-users@lists.clamav.net > > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > > > > Help us build a comprehensive ClamAV guide: > > https://github.com/vrtadmin/clamav-faq > > > > http://www.clamav.net/contact.html#ml > > > _______________________________________________ > clamav-users mailing list > clamav-users@lists.clamav.net > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml > _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
