[clamav-users] fp Img.Malware.Agent-6499558-0

Al Varnell alvarnell at mac.com
Sun May 6 22:40:56 EDT 2018


It's no secret that many Android Google apps are junk or flat out malware and the GameStore is either unable or unwilling to put sufficient assets in place to properly police it. 

I would agree that in this specific case, there is evidence of it being an FP (signature added today and ClamAV the only VT scanner showing it to be infected), but somebody must have submitted it believing it to be malware. It's no accident that an Android app is being detected by this signature. That's exactly what it was designed to do, whether right or wrong. 

If you feel certain that the app is harmless, you should submit as Joel asked.

Sent from my iPad

-Al-

On May 6, 2018, at 17:55, Benny Pedersen wrote:
> https://www.virustotal.com/file/074fe51b41596a05f5c04ba14c578786fe2edb553659fe9ffffc8bc1f3210ab0/analysis/1525623232/
> 
> it hits on android google apps



More information about the clamav-users mailing list