[clamav-users] Win.Trojan.Agent-1760811 FP with ssh-agent

[Al Varnell]

I do not have a sample of ssh-agent to upload yet, so with nothing to upload, I cannot file.

The MD-5 of the file is the signature.

Sent from Janet's iPad

Janet
-- 
Janet Varnell

On Oct 11, 2016, at 5:26 PM, "Joel Esler (jesler)" <jesler at cisco.com> wrote:

> Did you file a report on the website?
> 
> Sent from my iPhone
> 
>> On Oct 11, 2016, at 7:34 PM, Al Varnell <alvarnell at mac.com> wrote:
>> 
>> The Win.Trojan.Agent-1760811 signature released yesterday in daily - 22342 is identifying some version of OpenSSL’s ssh-agent to be reported as infected by at least three ClamXav users so far.  I have not been able to identify which version of OpenSSL it involves, but probably not the ones built in to any version of OS X/macOS.
>> 
>> VersionTracker shows that only ClamAV detects the file as infected here:
>> <https://www.virustotal.com/en/file/7815ec173d45abb2606c718fc1261bb4309254daa7b474e87541c6dc19dc934c/analysis/>.
>> 
>> If nobody else can identify the version I’ll continue to search when I get more time.
>> 
>> 
>> -Al-
>> -- 
>> Al Varnell
>> Mountain View, CA
>> 
>> 
>> 
>> 
>> _______________________________________________
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml