[clamav-users] Win.Malware.Krucky-7009041-0 false positive

[Arnaud Jacques]

Hello,

Signature of Win.Malware.Krucky-7009041-0 has been ignored in 
securiteinfo.ign2 since days, maybe weeks.
Download it now for free at 
https://www.securiteinfo.com/services/anti-spam-anti-virus/improve-detection-rate-of-zero-day-malwares-for-clamav.shtml?lg=en


Le 20/07/2019 à 13:35, Groach via clamav-users a écrit :
> Already have done. But I have never (no exaggeration) had any success 
> with it being actioned when reported only on that website. So I am also 
> sending this notification to the mail list on the hope that that is more 
> productive.
> 
> Thanks
> 
> 
> 
> On 20/07/2019 12:22, Matus UHLAR - fantomas wrote:
>> On 20.07.19 11:53, Groach via clamav-users wrote:
>>> C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe: 
>>> Win.Malware.Krucky-7009041-0 FOUND
>>>
>>> The file is from Adobe Acrobat (genuine file from 2011). Virustotal 
>>> hash: 
>>> https://www.virustotal.com/gui/file/5821567d7dd99623257aea794023ef4200e6e17fd09656b40d97c44a35c701bb
>>>
>>> Can we get the definition reviewed/removed please?
>>
>> you should report false positive on:
>>
>> https://www.clamav.net/reports/fp
>>
>>
> 
> 
> 
> _______________________________________________
> 
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
> 

-- 
Cordialement / Best regards,

Arnaud Jacques
Gérant de SecuriteInfo.com

Téléphone : +33-(0)3.44.39.76.46
E-mail : aj at securiteinfo.com
Site web : https://www.securiteinfo.com
Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom

Securiteinfo.com
La Sécurité Informatique - La Sécurité des Informations.
266, rue de Villers
60123 Bonneuil en Valois