[clamav-users] False positive detection for a Valid File

Al Varnell alvarnell at mac.com
Fri Aug 18 12:19:02 UTC 2017


There are five different signatures for Doc.Macro.Obfuscation-63xxxxx-x, so you need to specify exactly which one(s) is/are involved when you submit these files to <http://www.clamav.net/reports/fp>.

-Al-

On Fri, Aug 18, 2017 at 04:51 AM, Vijayakumar U wrote
> Dear Team,
> 
> Few zip and xls files downloaded from below site were filtered as
> Doc.Macro.Obfuscation
> 
> http://acesdownload.nic.in/ACES%20UTILITIES%20DOWNLOADS.html
> 
> http://acesdownload.nic.in/Documents/ACES-EFiling-ST3_April-June_2017_onwards_V1.10.zip
> 
> It is a false positive detected by some pattern matching.
> 
> Could you please do the needful to resolve the issue.
> 
> -- 
> Cheers,
> Vijay.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3569 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20170818/8896369b/attachment.bin>


More information about the clamav-users mailing list