Good Morning,
> Here are some other signatures that create many messages:
>
> Html.Malware.Agent-6625159-0
> Html.Malware.Agent-6625162-0
> Html.Malware.Agent-6625209-0
These stopped being reported this morning at around 04:00 our time (CEST).
Currently, there is one signature left which I beli
Hi Joel,
> >> The reported files are mostly jar files used by our applications
> >> (e.g. httpclient-*.jar, httpcore-*.jar in different versions). These
> >> are the signatures which produce most of the reports:
> >> Html.Malware.Agent-6625161-0
> >> Html.Malware.Agent-6625163-0
> >> Html.Malware.
I am dropping these signatures now.
> On Aug 1, 2018, at 9:57 AM, David Rosenstrauch wrote:
>
>
>
> On 07/31/2018 04:53 AM, Albrecht, Peter wrote:
>> Hello,
>> Since Saturday (2018-07-28) we are seeing many reports from clamscan having
>> found (possibly) infected files. I suspect these are fa
On 07/31/2018 04:53 AM, Albrecht, Peter wrote:
Hello,
Since Saturday (2018-07-28) we are seeing many reports from clamscan having
found (possibly) infected files. I suspect these are false positives because
checking
the files on virustotal.com returns only clamav reporting them as infected.
It helps the signature team locate those submitted files faster if you post
their hash values here.
-Al-
On Tue, Jul 31, 2018 at 01:53 AM, Albrecht, Peter wrote:
> Hello,
>
> Since Saturday (2018-07-28) we are seeing many reports from clamscan having
> found (possibly) infected files. I suspect
Hello,
Since Saturday (2018-07-28) we are seeing many reports from clamscan having
found (possibly) infected files. I suspect these are false positives because
checking
the files on virustotal.com returns only clamav reporting them as infected.
The reported files are mostly jar files used by our
