[clamav-users] Zip.Suspect.MacroDoubleExtension-zippwd false positive

2016-02-14 Thread nerslbmail
Hi,false positives started coming after update to (daily.cvd version: 21360)my submissions for false-positive reports on clamav.net keep reporting "The sample is empty." How to reproduce: mkdir /tmp/test_dir touch /tmp/test_dir/txt_csv.jar.0 jar cf test_dir.jar /tmp/test_dir # or zip -r test_dir

Re: [clamav-users] Zip.Suspect.MacroDoubleExtension-zippwd false positive

2016-02-14 Thread nerslbmail
I understand it can be whitelisted, but I posted to the list in hope that the person who introduced the problem to the file daily.cd on 2/12/2016 will read the thread and roll back the changes. Thanks! On Sunday, February 14, 2016 11:48 AM, Steve basford wrote: Hi, Here's the entry