Great! I am glad I could help! Thanks for the support! Wishes Antonio
2017-01-21 18:50 GMT+01:00 Alain Zidouemba <azidoue...@sourcefire.com>: > The signature Win.Trojan.Agent-1812140 is causing a FP on an Italian > Microsoft Office file from the mid-90s. I'm dropping the signature now. > > Thanks Antonio for taking the time to report this despite no longer having > access to the file that caused the FP. > > -Alain > > On Sat, Jan 21, 2017 at 11:38 AM, Antonio Piccolomini d'Aragona < > antpiccda...@gmail.com> wrote: > > > Actually, there is a 1 less. It is Win.Trojan.Agent-1812140 (I looked in > my > > Mac Cronology...where I looked for some ways to fix) > > > > 2017-01-21 17:16 GMT+01:00 Alain Zidouemba <azidoue...@sourcefire.com>: > > > > > Antonio, > > > > > > Unfortunately, I can't find any record of us having ever published > > > Win.Trojan.Agent-18112140. > > > Could the name of the signature that caused the FP be slightly > different? > > > > > > Alain > > > > > > On Sat, Jan 21, 2017 at 9:07 AM, Antonio Piccolomini d'Aragona < > > > antpiccda...@gmail.com> wrote: > > > > > > > Hi, > > > > I'm writing for the following problem. > > > > > > > > After sudo freshclam, I had a scan of my system (UBUNTU 12.04 LTS) by > > > sudo > > > > freshclam -r. ClamAv detected an infection relative to an ISO built > > from > > > a > > > > Windows 95 installation CD. The signaled virus was said to be a > > > > Win.Trojan.Agent-18112140. Previous scans never reported infected > files > > > > (although the ISO has always been there). I submitted the file to the > > > > VirusTotal online scan; there too, ClamAv reported the > > > > Win.Trojan.Agent-18112140, being anyway the only in doing so (for all > > the > > > > other checks the file was ok). Unfortunately, as I am moving and > needed > > > > have the computer with UBUNTU 12.04 turned into Windows, I formatted > > and > > > > lost the incriminated file. So, I could not report the (potentially) > > > false > > > > positive to the ClamAv site. I just wanted to ask you whether I can > be > > > > sure, or should worry; I use computer for work, and handle important > > > datas, > > > > so I would like to be sure that that was actually a false positive > (or > > in > > > > which percentage it might be). > > > > > > > > Thank you! > > > > > > > > Antonio > > > > _______________________________________________ > > > > clamav-users mailing list > > > > clamav-users@lists.clamav.net > > > > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > > > > > > > > > > Help us build a comprehensive ClamAV guide: > > > > https://github.com/vrtadmin/clamav-faq > > > > > > > > http://www.clamav.net/contact.html#ml > > > > > > > _______________________________________________ > > > clamav-users mailing list > > > clamav-users@lists.clamav.net > > > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > > > > > > > Help us build a comprehensive ClamAV guide: > > > https://github.com/vrtadmin/clamav-faq > > > > > > http://www.clamav.net/contact.html#ml > > > > > _______________________________________________ > > clamav-users mailing list > > clamav-users@lists.clamav.net > > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > > > > Help us build a comprehensive ClamAV guide: > > https://github.com/vrtadmin/clamav-faq > > > > http://www.clamav.net/contact.html#ml > > > _______________________________________________ > clamav-users mailing list > clamav-users@lists.clamav.net > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml > _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
