[clamav-users] FP: Win.Trojan.Agent-1696554 is md5sum of 2240 null bytes

[Joel Esler (jesler)]

All -

This signature was my fault.  It has been dropped.  Should drop with the next publish and run of freshclam.


> On Sep 27, 2016, at 5:46 AM, Al Varnell <alvarnell at mac.com> wrote:
> 
> On Sep 27, 2016, at 2:26 AM, David Shrimpton <d.shrimpton at its.uq.edu.au> wrote:
>> Is the original malware sample for which the signature was intended still available
>> and does it have the above sha256sum ?
> 
> Apparently available from the VT link Steve gave with the following file names:
> 
> 013167adc0b9fbc908390023f9c078009599ec95.IN_
> 044.PART.MET
> SAVESLOT2
> SAVESLOT3
> 001.PART.MET
> 044.PART.MET.BAK
> 
> And yes, the same SHA256 as you listed.
> 
> -Al-
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml