[clamav-users] Win.Trojan.Agent-1760811 FP with ssh-agent
Al Varnell
alvarnell at mac.com
Tue Oct 11 21:39:34 EDT 2016
I do not have a sample of ssh-agent to upload yet, so with nothing to upload, I cannot file.
The MD-5 of the file is the signature.
Sent from Janet's iPad
Janet
--
Janet Varnell
On Oct 11, 2016, at 5:26 PM, "Joel Esler (jesler)" <jesler at cisco.com> wrote:
> Did you file a report on the website?
>
> Sent from my iPhone
>
>> On Oct 11, 2016, at 7:34 PM, Al Varnell <alvarnell at mac.com> wrote:
>>
>> The Win.Trojan.Agent-1760811 signature released yesterday in daily - 22342 is identifying some version of OpenSSL’s ssh-agent to be reported as infected by at least three ClamXav users so far. I have not been able to identify which version of OpenSSL it involves, but probably not the ones built in to any version of OS X/macOS.
>>
>> VersionTracker shows that only ClamAV detects the file as infected here:
>> <https://www.virustotal.com/en/file/7815ec173d45abb2606c718fc1261bb4309254daa7b474e87541c6dc19dc934c/analysis/>.
>>
>> If nobody else can identify the version I’ll continue to search when I get more time.
>>
>>
>> -Al-
>> --
>> Al Varnell
>> Mountain View, CA
>>
>>
>>
>>
>> _______________________________________________
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
More information about the clamav-users
mailing list