[clamav-users] Malwarepatrol false positive

[Reindl Harald]

Am 27.08.2018 um 20:16 schrieb Mark G Thomas:
> This seems to be an ongoing trend.
> 
> I can't believe someone thought this would be a good idea!
> 
>     # sigtool --find-sigs MBL_13087222 | sigtool --decode-sigs
>     VIRUS NAME: MBL_13087222
>     DECODED SIGNATURE:
>     https://docs.google.com

that happens when you let users which are mostly idiots submit samples
without proper review and in doubt ignore, be it bayes, uribl or signatures