Re: [Clamav-users] PDF-9669 False Positives?

2010-01-08 Thread porcupine
daily.cvd version 10274 http://pro.abac.com/daily.cvd http://pro.abac.com/daily.cvd as posted at #clamav on irc.FreeNode.net -- View this message in context: http://old.nabble.com/PDF-9669-False-Positives--tp27084341p27085610.html Sent from the clamav-users mailing list archive at Nabble.com.

Re: [Clamav-users] PDF-9669 False Positives?

2010-01-08 Thread Chris Hardie
A number of us are discussing this issue in #clamav on irc.freenode.net. Indeed, it seems like false positives galore, and that editing the daily file to remove the line Richard mentioned, and restarting, is the fix for now. I've attempted to contact SourceFire to urge an official notification a

Re: [Clamav-users] PDF-9669 False Positives?

2010-01-08 Thread Richard Bishop
Michael R. Dilworth wrote: > PDF-9669 seems to be matching most HTML encoded messages on > older versions of ClamAV. Yes I know update... But I thought > I had a couple of more months to clean things up... I've seen lots of false positives matching on this signature. At first I thought somebod

[Clamav-users] PDF-9669 False Positives?

2010-01-08 Thread Michael R. Dilworth
PDF-9669 seems to be matching most HTML encoded messages on older versions of ClamAV. Yes I know update... But I thought I had a couple of more months to clean things up... michael... ___ Help us build a comprehensive ClamAV guide: visit h