[clamav-users] More fp's. Now its almost everything that has been zipped.

[Al Varnell]

Four have already been dropped and I’m sure there will be more to come.

It will go faster if you submit samples to <http://www.clamav.net/reports/fp> and post a hash back here of the file(s) you uploaded.

-Al-

On Mon, Dec 26, 2016 at 02:43 AM, Frank Sfalanga Jr. wrote:
> 
> This includes .jar zips.  I am seeing this across dozens of GNU/Linux
> servers. Other than --exclude=*.jar what else can be done to fix these
> fp's?
> 
> ===================================================
> 
> /home/ddale/.gradle/wrapper/dists/gradle-1.10-
> bin/6oa4rff9viiqskhgd6uns5v1f8/gradle-1.10/lib/plugins/gradle-plugins-
> 1.10.jar: Win.Trojan.Toa-5367477-0 FOUND
> /home/frank/.gradle/wrapper/dists/gradle-1.10-
> bin/6oa4rff9viiqskhgd6uns5v1f8/gradle-1.10/lib/plugins/gradle-plugins-
> 1.10.jar: Win.Trojan.Toa-5367477-0 FOUND
> 
> ===================================================
> 
> Any chance this will be fixed? Between the fp's for --detect-
> structured=yes and these fp's for trojans Clamscan is becoming, IMHO,
> its own worst enemy.
> 
> 
> Frank Sfalanga Jr.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3573 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20161226/f4468eaa/attachment.bin>