Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: ClamAV: win32

PUA false positive report.

 

 

ClamAV win32 RSS feed   Index | Next | Previous | View Threaded


biplab.kumar at gmail

Jun 7, 2011, 10:14 PM

Post #1 of 2 (4057 views)
Permalink
PUA false positive report.

Hi,

One of our customer is reporting a PUA false positive wherein a PDF file is
being classified as *PUA.Script.PDF.EmbeddedJS. *Since the virus submission
page clearly states that it will ignore false positives for PUA,
is there a different channel for submitting false positive report for PUA or
are they never fixed?.

Any information on this would be much appreciated.

Thanks and Regards,
Biplab Swain
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32


azidouemba at sourcefire

Jun 8, 2011, 8:04 AM

Post #2 of 2 (3951 views)
Permalink
Re: PUA false positive report. [In reply to]

Biplab,

PUA.Script.PDF.EmbeddedJS has been replaced with PUA
.Script.PDF.EmbeddedJS-1. PUA.Script.PDF.EmbeddedJavascript has been
published as well.

Please let us know if you are still experiencing problems with the new
signatures. Please submit any FP report through the submission page (for
now, please disregard the the statement about PUA FP reports).

Thanks,

-Alain
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

ClamAV win32 RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.