[clamav-users] FP

[Tsutomu Oyamada]

Hi, Al

Thank you, we found that the previous detection error= false positive has been solved.

In addition to the above, the following signature also causes another detection error=
false positive.

Swf.Exploit.CVE_2016_7865-1

The file was uploaded to FP site.

com.ibm.tivoli.tpm.video.doc_7.2.1.jar
createjs_short_controller.swf
explore_ui_controller.swf
using_ic_controller.swf

All errors occurred by the same signature.

We want to ask you to solve this issue

T.O

On Fri, 11 Nov 2016 02:23:41 -0800
Al Varnell <alvarnell at mac.com> wrote:

> I see that the definition was dropped in daily - 22512.
> 
> -Al-
> 
> On Tue, Nov 08, 2016 at 10:52 PM, Tsutomu Oyamada wrote:
> > 
> > Hi, all.
> > 
> > We are in a problem of detection error (false positive) against a file.
> > We are receiving complaint for this issue from one of our customers every day.
> > 
> > We put the sample file on http://www.clamav.net/reports/fp 2weeks and more days ago
> > at some times.
> > However, we have not gotten any new cvd which solve the problem of false positive.
> > 
> > The file sent from us is as follows;
> > SHA256: 7b0eeafc01df6df00726d29af0e8c0b424859333363ddbcd8781a16349a84071
> > faile name:  filegroup4.jar
> > FP: Swf.Exploit.CVE_2015_7645-1
> > 
> > We want to support/solve this problem with cvd, though we know we can treat to solve this
> > with using .fp.
> > 
> > T.O