Re: [clamav-users] False positives with CRDF.Malware.Win32.PEx.*.426953001.UNOFFICIAL

2012-11-27 Thread Benny Pedersen
Steve Basford skrev den 26-11-2012 15:12: http://sanesecurity.co.uk/fps.htm thanks, this is verbosely explained there is sanesecurity.ftm resolved with daily.ftm now ?, last time i checked it looked like there was dupes, so now i dont use it anymore __

Re: [clamav-users] False positives with CRDF.Malware.Win32.PEx.*.426953001.UNOFFICIAL

2012-11-26 Thread Steve Basford
> Jari Fredriksson skrev den 25-11-2012 17:10: >> These rules must have a common signature? Old downloads suddenly >> trigger >> positives. > > unofficial sigs, what should clamav team do about them ? Well, I've tried to explain what to do with FP's like this... http://sanesecurity.co.uk/fps.htm

Re: [clamav-users] False positives with CRDF.Malware.Win32.PEx.*.426953001.UNOFFICIAL

2012-11-26 Thread Benny Pedersen
Jari Fredriksson skrev den 25-11-2012 17:10: These rules must have a common signature? Old downloads suddenly trigger positives. unofficial sigs, what should clamav team do about them ? only report fails on official sigs ___ Help us build a compr

Re: [clamav-users] False positives with CRDF.Malware.Win32.PEx.*.426953001.UNOFFICIAL

2012-11-26 Thread Steve Basford
> > These rules must have a common signature? Old downloads suddenly trigger > positives. Hi Jari, These sigs need to be reported as FP's to: false_positive AT crdf.fr In the mean time, I've whitelisted on the mirrors, until they can take a look. One thing to double check is to submit one of

Re: [clamav-users] False positives with CRDF.Malware.Win32.PEx.*.426953001.UNOFFICIAL

2012-11-25 Thread Christoph
Am 25.11.2012 um 17:10 schrieb Jari Fredriksson: > These rules must have a common signature? Old downloads suddenly trigger > positives. It looks like you are using some 3rd party signatures. Please contact the author of this signature(s). -- Christoph _

[clamav-users] False positives with CRDF.Malware.Win32.PEx.*.426953001.UNOFFICIAL

2012-11-25 Thread Jari Fredriksson
These rules must have a common signature? Old downloads suddenly trigger positives. Alkuperäinen viesti / Orig.Msg. Aihe: Anacron job 'cron.weekly' on whirlwind Päiväys:Sun, 25 Nov 2012 09:01:19 +0200 (EET) Lähettäjä: Anacron Vastaanottaja: r...@jarif.iki.fi