Re: [clamav-users] PUA and file descriptions

2015-05-29 Thread Joel Esler (jesler)
We implemented a naming convention about 3 years ago that we’ve been using since, things named before that were named.. somewhat loosely. -- Joel Esler Open Source Manager Threat Intelligence Team Lead Talos Group http://www.talosintel.com On May 28, 2015, at 2:50 PM, Al Varnell mailto:alvarn

[clamav-users] adding a new scan target to the daily

2015-05-29 Thread Gene Heskett
Greetings; All this talk about this HTML exploit makes me want to add my own "on this machine" web pages to the list of targets to scan. Since they are scattered far and wide in the /opt tree, but most are links from /var/www/html, if I add that one location to the list, will it follow the li

Re: [clamav-users] malware Html.Exploit.CVE_2015_0045

2015-05-29 Thread Dennis Peterson
On 5/29/15 4:20 AM, Paul Martin wrote: Hello, I have many false positive when clamav detects "malware Html.Exploit.CVE_2015_0045", what can I do to stop these false positive ? Thanks, Paul ___ Help us build a comprehensive ClamAV guide: https://github

Re: [clamav-users] malware Html.Exploit.CVE_2015_0045

2015-05-29 Thread Al Varnell
Just out of curiosity, how do you know these are false positives? Do you own a web site where these have been found? -Al- On Fri, May 29, 2015 at 04:20AM, Paul Martin wrote: > > Hello, > > I have many false positive when clamav detects "malware > Html.Exploit.CVE_2015_0045", > what can I do t

Re: [clamav-users] malware Html.Exploit.CVE_2015_0045

2015-05-29 Thread Joel Esler (jesler)
http://www.clamav.net/report/report-fp.html -- Joel Esler Sent from my iPhone On May 29, 2015, at 7:21 AM, Paul Martin mailto:paul.martin.b...@gmail.com>> wrote: Hello, I have many false positive when clamav detects "malware Html.Exploit.CVE_2015_0045", what can I do to stop these false positi

[clamav-users] malware Html.Exploit.CVE_2015_0045

2015-05-29 Thread Paul Martin
Hello, I have many false positive when clamav detects "malware Html.Exploit.CVE_2015_0045", what can I do to stop these false positive ? Thanks, Paul ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clam