Hey Matt!

Thank you for reporting this. The signature has been dropped while we investigate the situation to prevent more FPs.

Lilia Gonzalez Medina
Malware Research Team
Cisco Talos

On Fri, Aug 14, 2020 at 11:10 AM Matt Campbell via clamav-users <clamav-users@lists.clamav.net> wrote:
Hello,

I have an XLSM spreadsheet that ClamAV is detecting malware in. Its popping up as Xls.Malware.Sagent-7132944-0 and I have not been able to find any information related to this definition. Can anyone shed some light on what this relates to?

This is an in house created spreadsheet for my company and I'm thinking it is a false positive. 

_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml