[clamav-users] Java.Malware fps

Reindl Harald h.reindl at thelounge.net
Fri Apr 7 03:01:42 EDT 2017



Am 07.04.2017 um 08:24 schrieb Henrik K:
> Whos' flooding crappy samples around, and why is ClamAV making sigs of tiny class files like org/eclipse/aether/impl/RemoteRepositoryManager.class?

because .jar malware attachments in mails are not uncommon and the major 
usecase of ClamAV is on a inbound mailserver. however - .jar files 
should be rejected at all like .scr and many other extensions


More information about the clamav-users mailing list