Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: ClamAV: devel

Please review W32.Virut.Gen signatures since they are raising a lot of fp

 

 

ClamAV devel RSS feed   Index | Next | Previous | View Threaded


sherpya at netfarm

Jun 6, 2008, 9:19 AM

Post #1 of 2 (1223 views)
Permalink
Please review W32.Virut.Gen signatures since they are raising a lot of fp

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

These signatures are matching a lot of legitimate c# dlls

Regards

- --
Gianluigi Tiesi <sherpya [at] netfarm>
EDP Project Leader
Netfarm S.r.l. - http://www.netfarm.it/
Free Software: http://oss.netfarm.it/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkhJY6AACgkQ3UE5cRfnO05zdQCfV7Yk5aTA8JeD3zW6oP5DXP3a
gqIAn2U58AwBOmA7GP36xB59SiMag8J4
=DMub
-----END PGP SIGNATURE-----
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net


acabng at digitalfuture

Jun 6, 2008, 12:15 PM

Post #2 of 2 (1138 views)
Permalink
Re: Please review W32.Virut.Gen signatures since they are raising a lot of fp [In reply to]

Gianluigi Tiesi wrote:
> These signatures are matching a lot of legitimate c# dlls

Hello lists,

We got badly hit by Murphy's law today.
A bunch of signatures, which were meant to extend the existing coverage
provided by the W32.Virut.Gen.C set, were published without being
properly checked.
As soon as we figured out the mistake and located the bug we tried to
drop them but, unfortunately, due to an hardware crash our signature
management interface has been unavailable for several hours.

We managed to fix everything and all the broken signatures were finally
dropped at 16:05:19 GMT with daily update 7388.

Apologies.
-aCaB
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

ClamAV devel RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.