Mailing List Archive: ClamAV: win32

PUA false positive report.

Index | Next | Previous | View Threaded

biplab.kumar at gmail

Jun 7, 2011, 10:14 PM

Post #1 of 2 (2941 views)
Permalink

PUA false positive report.

Hi,

One of our customer is reporting a PUA false positive wherein a PDF file is
being classified as *PUA.Script.PDF.EmbeddedJS. *Since the virus submission
page clearly states that it will ignore false positives for PUA,
is there a different channel for submitting false positive report for PUA or
are they never fixed?.

Any information on this would be much appreciated.

Thanks and Regards,
Biplab Swain
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

azidouemba at sourcefire

Jun 8, 2011, 8:04 AM

Post #2 of 2 (2866 views)
Permalink

Re: PUA false positive report. [In reply to]

Biplab,

PUA.Script.PDF.EmbeddedJS has been replaced with PUA
.Script.PDF.EmbeddedJS-1. PUA.Script.PDF.EmbeddedJavascript has been
published as well.

Please let us know if you are still experiencing problems with the new
signatures. Please submit any FP report through the submission page (for
now, please disregard the the statement about PUA FP reports).

Thanks,

-Alain
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads