[clamav-users] Clamav found in php files Archive.Test.Agent2-9953724-0

[Cyrille37]

Thanks all for your answers

I've submitted the false positive.

Regards & cheers
Cyrille37.

On 24/06/2022 15:19, Maarten Broekman via clamav-users wrote:
> This is a new signature that was added today. It's rather complicated 
> and, with the "Test" in the name, I'm not sure it's meant to be 
> published. We'll have to wait to hear from the ClamAV folks on that 
> matter, but you can submit it as a false positive (for those Wordpress 
> zips) using the False positive report page: 
> https://www.clamav.net/reports/fp
>
>
> On Fri, Jun 24, 2022 at 8:49 AM Cyrille37 
> <cyrille.clamav-users at giquello.fr> wrote:
>
>     Hello
>
>     I don't understand why, but it appends this morning on already
>     existed files (in the wp-cli cache folder) :
>
>     Start Date: 2022:06:24 12:15:01
>     End Date:   2022:06:24 12:15:17
>     /home/caf37-pt/.wp-cli/cache/core/wordpress-5.8.3-fr_FR.zip:
>     Archive.Test.Agent2-9953724-0 FOUND
>     /home/caf37-pt/.wp-cli/cache/core/wordpress-5.8.2-fr_FR.zip:
>     Archive.Test.Agent2-9953724-0 FOUND
>     /home/caf37-pt/.wp-cli/cache/core/wordpress-5.9-fr_FR.zip:
>     Archive.Test.Agent2-9953724-0 FOUND
>     /home/caf37-pt/.wp-cli/cache/core/wordpress-5.8.1-fr_FR.zip:
>     Archive.Test.Agent2-9953724-0 FOUND
>     /home/caf37-pt/.wp-cli/cache/core/wordpress-5.9.3-fr_FR.zip:
>     Archive.Test.Agent2-9953724-0 FOUND
>     /home/caf37-pt/.wp-cli/cache/core/wordpress-5.9.1-fr_FR.zip:
>     Archive.Test.Agent2-9953724-0 FOUND
>     /home/caf37-pt/.wp-cli/cache/core/wordpress-5.9.2-fr_FR.zip:
>     Archive.Test.Agent2-9953724-0 FOUND
>
>     I could not find on the web some discussions about
>     "Archive.Test.Agent2-9953724-0" except this one
>     https://answers.sap.com/questions/13665326/upload-application-content-failed-malware-detected.html
>
>     Thanks for help :-)
>
>     Cyrille37.
>
>     _______________________________________________
>
>     clamav-users mailing list
>     clamav-users at lists.clamav.net
>     https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
>     Help us build a comprehensive ClamAV guide:
>     https://github.com/Cisco-Talos/clamav-documentation
>
>     https://docs.clamav.net/#mailing-lists-and-chat
>
>
> _______________________________________________
>
> clamav-users mailing list
> clamav-users at lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat

-- 

   Cyrille Giquello - 06 32 33 02 18 -cyrille at giquello.fr  - FR37 Tours

  (¯`·._.·[  Coopérateur @ Artefacts -https://artefacts.coop   ]·._.·´¯)
ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø¸¸,ø¤º°`°º¤ø¸¸,ø¤º°`°º¤ø

  Pour améliorer l'impact climatique du numérique adoptez quelques-unes
   des 72 bonnes pratiqueshttps://checklists.opquast.com/fr/greenit

   Pour toute question relative au bon usage et à la rectification
  de vos données à caractère personnel n'hésitez pas à me contacter.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20220624/e4cb6c82/attachment.htm>