Re: [clamav-users] Clamav found in php files Archive.Test.Agent2-9953724-0

2022-06-24 Thread Christopher Marczewski
Build 26583 for daily.cvd is ready for use. We're also taking additional steps and safety measures to ensure experimental signatures are not eligible for additions to any published CVD. On Fri, Jun 24, 2022 at 10:36 AM Christopher Marczewski < cmarczew...@sourcefire.com> wrote: > This is a test s

Re: [clamav-users] Clamav found in php files Archive.Test.Agent2-9953724-0

2022-06-24 Thread Christopher Marczewski
This is a test signature that should have never made it through. We're immediately dropping it and pushing out a new build. On Fri, Jun 24, 2022 at 9:51 AM Maarten Broekman via clamav-users < clamav-users@lists.clamav.net> wrote: > It's 100% a bad signature and should get removed. > > I just chec

Re: [clamav-users] Clamav found in php files Archive.Test.Agent2-9953724-0

2022-06-24 Thread Maarten Broekman via clamav-users
It's 100% a bad signature and should get removed. I just checked the current version of the akismet plugin ( https://wordpress.org/plugins/akismet/) from WordPress and it is detected by this signature but by nothing else: https://virusscan.jotti.org/en-US/filescanjob/00ecsxf7es https://www.virusto

Re: [clamav-users] Clamav found in php files Archive.Test.Agent2-9953724-0

2022-06-24 Thread Cyrille37
Thanks all for your answers I've submitted the false positive. Regards & cheers Cyrille37. On 24/06/2022 15:19, Maarten Broekman via clamav-users wrote: This is a new signature that was added today. It's rather complicated and, with the "Test" in the name, I'm not sure it's meant to be publis

Re: [clamav-users] Clamav found in php files Archive.Test.Agent2-9953724-0

2022-06-24 Thread Maarten Broekman via clamav-users
This is a new signature that was added today. It's rather complicated and, with the "Test" in the name, I'm not sure it's meant to be published. We'll have to wait to hear from the ClamAV folks on that matter, but you can submit it as a false positive (for those Wordpress zips) using the False posi

Re: [clamav-users] Clamav found in php files Archive.Test.Agent2-9953724-0

2022-06-24 Thread G.W. Haywood via clamav-users
Hi there, On Fri, 24 Jun 2022, Cyrille37 wrote: I don't understand why, but it appends this morning on already existed files (in the wp-cli cache folder) : Start Date: 2022:06:24 12:15:01 End Date:   2022:06:24 12:15:17 /home/caf37-pt/.wp-cli/cache/core/wordpress-5.8.3-fr_FR.zip: Archive.Tes

[clamav-users] Clamav found in php files Archive.Test.Agent2-9953724-0

2022-06-24 Thread Cyrille37
Hello I don't understand why, but it appends this morning on already existed files (in the wp-cli cache folder) : Start Date: 2022:06:24 12:15:01 End Date:   2022:06:24 12:15:17 /home/caf37-pt/.wp-cli/cache/core/wordpress-5.8.3-fr_FR.zip: Archive.Test.Agent2-9953724-0 FOUND /home/caf37-pt/.wp