[clamav-users] swift.doc Doc.Dropper.Agent-1776597

Joel Esler (jesler) jesler at cisco.com
Wed Oct 19 17:29:55 EDT 2016

Yup, that’s one of mine.  Glad to see my system is working ;)

As far as why it didn’t work, I’ll have to defer this to Steve on the dev team.

Joel Esler | Talos: Manager| jesler at cisco.com<mailto:jesler at cisco.com>

On Oct 19, 2016, at 10:16 AM, Steve Basford <steveb_clamav at sanesecurity.com<mailto:steveb_clamav at sanesecurity.com>> wrote:

On Wed, October 19, 2016 3:12 pm, Joel Esler (jesler) wrote:

Can you clarify which sig caught it?

Doc.Dropper.Agent-177659 is not an actual sig number.

Damn cut and paste... it's: Doc.Dropper.Agent-1776597
(a hash)


Twitter: @sanesecurity

Help us build a comprehensive ClamAV guide:


More information about the clamav-users mailing list