Just wondering if there's any SLES 10 Folks out there on Clam 0.93 with
daily.cld at level 7386 is seeing this against Novell.Directory.Ldap.dll in
the directory specified in my email below.
I'm not seeing any mentiones of this signature out on google, and i've mailed
the virus signature maintainers, but have not heard back. I can confirm
that this issue was in 7384 now, as I found one of my stand-alone servers at
this levelset and that machine was updated yesterday prior to 7385 coming
out.
Not sure what to do here, sinc 7386 didn't clear it. I've submitted the dll
file and emailed some of the signature maintainers. Again, Virustotal is
not flagging this on all 32 services they use to run against samples.
[EMAIL PROTECTED]
Sent by: [EMAIL PROTECTED]
To
[email protected]
06/06/2008 07:43 AM
cc
Subject
Please respond to
[Clamav-users] False positive for W32.Virut.Gen.D-146
ClamAV users ML <[email protected]>
Mostly this is an FYI/Heads up for people.
This is ocurring exclusively against:
/usr/lib/mono/gac/Novell.Directory.Ldap/2.0.0.0__0738eb9f132ed756/Novell.Directory.Ldap.dll
on all the servers I
have running SUSE Linux Enterprise Server 10.
I uploaded the file to Virusttotal, which is running Clam AV 0.92.1 and it is
not getting flagged (they are obviously out of date) by that clam
release nor any of the others. I submitted a false positive report to the clam
AV DB team about an hour ago.
This is was clam 0.93 against daily cld version: 7384 and 7385.
Current freshclam version reported as: ClamAV 0.93/7385/Fri Jun 6 05:55:30
2008
Disclaimer: Information in this message or an attachment may be government data
and thereby subject to the Minnesota Government Data Practices Act,
Minnesota Statutes, Chapter 13, may be subject to attorney-client or work
product privilege, may be confidential, privileged, proprietary, or
otherwise protected, and the unauthorized review, copying, retransmission, or
other use or disclosure of the information is strictly prohibited. If
you are not the intended recipient of this message, please immediately notify
the sender of the transmission error and then promptly delete this
message from your computer system.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
Disclaimer: Information in this message or an attachment may be government data
and thereby subject to the Minnesota Government Data Practices Act, Minnesota
Statutes, Chapter 13, may be subject to attorney-client or work product
privilege, may be confidential, privileged, proprietary, or otherwise
protected, and the unauthorized review, copying, retransmission, or other use
or disclosure of the information is strictly prohibited. If you are not the
intended recipient of this message, please immediately notify the sender of the
transmission error and then promptly delete this message from your computer
system.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
