[clamav-users] False positive -- I hope

Steve Basford steveb_clamav at sanesecurity.com
Sun Jan 28 21:32:44 UTC 2018


>
> I *think* that this signature flags *all* zipped JS files, and (IIRC)
> both Firefox and Thunderbird have JS-containing JAR files. I hope that
> is all it is.
>
>
Yep that's it.

Foxhole_filename. Foxhole_all. Foxhole_generic and Foxhole_js all have 
different fp levels...depending on what your see your risks as.

Cheers,

Steve
Twitter: @sanesecurity





More information about the clamav-users mailing list