[clamav-users] FP: Win.Trojan.Agent-1696554 is md5sum of 2240 null bytes

Steve Basford steveb_clamav at sanesecurity.com
Tue Sep 27 04:02:15 EDT 2016


On Tue, September 27, 2016 8:39 am, David Shrimpton wrote:
> Hi,
>
>
> Win.Trojan.Agent-1696554 added to daily.hdb on 21/9/16 is an
> md5sum of a file containing 2240 null bytes only, so appears to be a broken
> signature.
>
> It is causing false positives.

Confirmed FP I would say:

https://virustotal.com/en/file/2f7eaacf490839d9c603736149286272aea4df46c0daf58f0c70062041c68230/analysis/

-- 
Cheers,

Steve
Twitter: @sanesecurity




More information about the clamav-users mailing list