[clamav-users] Java.Malware fps

[Steve Basford]

On Fri, April 7, 2017 7:24 am, Henrik K wrote:
>

> Whos' flooding crappy samples around, and why is ClamAV making sigs of
> tiny class files like
> org/eclipse/aether/impl/RemoteRepositoryManager.class?
>
>
The odd few I've checked are hashes in daily.hsb:

cd9bcebd235258962913a210ff938a5a:2623:Java.Malware.Agent-6205983-0:73
b6aa66e635ff2c1225d734c3f2577994:1452:Java.Malware.Agent-6205984-0:73

So, possibly part of the auto-generated ones.

-- 
Cheers,

Steve
Twitter: @sanesecurity