[clamav-users] swift.doc Doc.Dropper.Agent-1776597

[Joel Esler (jesler)]

Yup, that’s one of mine.  Glad to see my system is working ;)

As far as why it didn’t work, I’ll have to defer this to Steve on the dev team.

--
Joel Esler | Talos: Manager| jesler at cisco.com<mailto:jesler at cisco.com>





On Oct 19, 2016, at 10:16 AM, Steve Basford <steveb_clamav at sanesecurity.com<mailto:steveb_clamav at sanesecurity.com>> wrote:


On Wed, October 19, 2016 3:12 pm, Joel Esler (jesler) wrote:
Heino,


Can you clarify which sig caught it?


Doc.Dropper.Agent-177659 is not an actual sig number.

Damn cut and paste... it's: Doc.Dropper.Agent-1776597
(a hash)

--
Cheers,

Steve
Twitter: @sanesecurity

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml