Joao S Veiga wrote:
> Hi, I was getting tons of these false positives (just reported&submitted a
> sample).
>
> you can delete the line:
>
> Email.FreeGame:4:*:75626a6563743a{-30}(67|47)616d65*687474703a2f2f(31|32|33|34|35|36|37|38|39)
>
> from /var/lib/clamav/daily.inc/daily.ndb
>
> and it will go away.
>
> It is triggered by any file (or email, or mbox) contaning
>
> "pagame" after "Subject: " (or /^Subject: / followed by /pagame.*/i)
>
> then anything (or nothing), folowed by a line
>
> http//(any number) (or http://[0-9])
>
This was brought up here very recently, like yesterday and the day before (see
Getting line numbers", and the pattern has been removed. Email.FreeGame-1 and
Email.FreeGame-2 still exist.
dp
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
