[clamav-users] Win.Trojan.Agent-1760811 FP with ssh-agent

Al Varnell alvarnell at mac.com
Tue Oct 11 19:34:33 EDT 2016

The Win.Trojan.Agent-1760811 signature released yesterday in daily - 22342 is identifying some version of OpenSSL’s ssh-agent to be reported as infected by at least three ClamXav users so far.  I have not been able to identify which version of OpenSSL it involves, but probably not the ones built in to any version of OS X/macOS.

VersionTracker shows that only ClamAV detects the file as infected here:

If nobody else can identify the version I’ll continue to search when I get more time.

Al Varnell
Mountain View, CA

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3573 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20161011/eac3f82f/attachment.bin>

More information about the clamav-users mailing list