[clamav-users] False negative.

Steve Basford steveb_clamav at sanesecurity.com
Sun Aug 21 12:34:55 EDT 2016


On Sun, August 21, 2016 5:02 pm, G.W. Haywood wrote:
> Hi there,
>
>
> I tried to submit this:
>
>
> https://virusscan.jotti.org/en-GB/filescanjob/3fyvy4dcmm
>
>
> using this:
>
> http://www.clamav.net/reports/malware
>
>
> but my browser gets no response, just a blank page, after hitting
> 'submit'.  So I don't know if it's submitted or not.
I had a blank page... swapped browser and it worked ok the next time.

The above sample looks like random ransomware, 3rd Party sigs:
phish.ndb, foxhole_filename.cdb, foxhole_generic.cdb, foxhole_js.cdb
can usually block these script type nasties.

Cheers,

Steve
Web : sanesecurity.com
Twitter: @sanesecurity




More information about the clamav-users mailing list