Re: [clamav-users] FP Win.Trojan.Agent-1395367

2016-04-21 Thread Joel Esler (jesler)
Yeah, sorry, I was swamped yesterday and didn’t get to follow up, we obviously dropped them both. -- Joel Esler Manager, Talos Group On Apr 21, 2016, at 4:08 AM, Al Varnell mailto:alvarn...@mac.com>> wrote: Looks like the other was dropped, as well in Daily:21500 Dropped Detection Signatur

Re: [clamav-users] FP Win.Trojan.Agent-1395367

2016-04-21 Thread Al Varnell
Looks like the other was dropped, as well in Daily:21500 > Dropped Detection Signatures: > >* Win.Trojan.Agent-1395005 > >* Win.Trojan.Agent-1395367 Sent from Janet's iPad -Al- On Apr 20, 2016, at 7:01 AM, Alain Zidouemba wrote: > Confirming the FP on MD5: 585005690e530e8047374cf14e47

Re: [clamav-users] FP Win.Trojan.Agent-1395367

2016-04-21 Thread Hajo Locke
Hello, Am 20.04.2016 um 16:01 schrieb Alain Zidouemba: Confirming the FP on MD5: 585005690e530e8047374cf14e479281. The signature Win.Trojan.Agent-1395367 has been removed. Thanks to all. Hajo ___ Help us build a comprehensive ClamAV guide: https://g

Re: [clamav-users] FP Win.Trojan.Agent-1395367

2016-04-20 Thread Alain Zidouemba
Confirming the FP on MD5: 585005690e530e8047374cf14e479281. The signature Win.Trojan.Agent-1395367 has been removed. - Alain On Wed, Apr 20, 2016 at 3:02 AM, Hajo Locke wrote: > Hello, > > there seems to be a new FP within a Wordpress Plugin. > Download ist here: > https://jetpack.com/install/?

Re: [clamav-users] FP Win.Trojan.Agent-1395367

2016-04-20 Thread Al Varnell
This one was added on Friday in daily:21494 Similar results as before on VT: -Al- On Wed, Apr 20, 2016 at 01:45 AM, Hajo Locke wrote: > > Hello, > > Am 20.04.2016 um 09:31 schrieb H

Re: [clamav-users] FP Win.Trojan.Agent-1395367

2016-04-20 Thread Hajo Locke
Hello, Am 20.04.2016 um 09:31 schrieb Hajo Locke: Hello, Am 20.04.2016 um 09:20 schrieb Al Varnell: The signature was just added yesterday in daily:21498 and yes it is an MD5 of size 892 bytes, so it could well be an FP. Not sure what you mean by “automatic created md5 Signature” and given

Re: [clamav-users] FP Win.Trojan.Agent-1395367

2016-04-20 Thread Hajo Locke
Hello, Am 20.04.2016 um 09:20 schrieb Al Varnell: The signature was just added yesterday in daily:21498 and yes it is an MD5 of size 892 bytes, so it could well be an FP. Not sure what you mean by “automatic created md5 Signature” and given that it’s a JavaScript I don’t know how you can conc

Re: [clamav-users] FP Win.Trojan.Agent-1395367

2016-04-20 Thread Al Varnell
The signature was just added yesterday in daily:21498 and yes it is an MD5 of size 892 bytes, so it could well be an FP. Not sure what you mean by “automatic created md5 Signature” and given that it’s a JavaScript I don’t know how you can conclude it’s contents “looks ok”, but you did the right

[clamav-users] FP Win.Trojan.Agent-1395367

2016-04-20 Thread Hajo Locke
Hello, there seems to be a new FP within a Wordpress Plugin. Download ist here: https://jetpack.com/install/?from=wporg http://downloads.wordpress.org/plugin/jetpack.latest-stable.zip File jetpack/modules/theme-tools/responsive-videos/responsive-videos.min.js is reported as Win.Trojan.Agent-13