i have had ZERO matches on the CVE_2017_11241 signature on the last days. Had several hundreds (which i believe are all FPs) on the CVE_2017_11244 which, to me, is still active.
Had to whitelist it (local.ign2) to get rid of the problem. Em 15/09/17 08:39, Al Varnell escreveu:
BC.Win.Exploit.CVE_2017_11241-6335400-2 was dropped in bytecode - 311, but not BC.Win.Exploit.CVE_2017_11244-6335828-0.
-- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertru...@solutti.com.br My SPAMTRAP, do not email it _______________________________________________ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml