On Wednesday 17 October 2012 09:36:40 Al Varnell did opine:

> On 10/17/12 12:09 AM, "Gene Heskett"  wrote:
> > On Wednesday 17 October 2012 03:08:07 Al Varnell did opine:
> >> Gene,
> >> 
> >> Note that the ClamAV folks do not accept the premise of a PUA being
> >> an FP.
> >> 
> >> If you go to the FP submission page you will read:
> >> 
> >> "Please do not report false positives for PUA.* signatures because
> >> they are automatically rejected"
> >> 
> >> Before they adopted this policy I was able to slip a bug report in
> >> (June 2010) concerning the over 1300 PUA.HTML.Infected.WebPage-2
> >> FP's I got, but it is still open.  I ended up white-listing it.
> > 
> > Is there a man page describing how to do that?
> 
> Section 3.8, second paragraph (p.16) of signatures.pdf docs file or
> download from  <http://www.clamav.net/doc/latest/signatures.pdf>.
> 
I've now tried to make sense of that for about 15 minutes, but that isn't 
at all clear to someone who hasn't gotten familiar with the clamav 
internals for quite some time. I'm not familiar with the internal short 
hand IOW.

I note that by the time it had finished, there was also about 30 lines in 
the mozilla cache added to that log file.  One could probably write a bash 
script to go over the log and auto rm that stuff with no harmful side 
effects on firefox.  There it did name a whole slew of stuff different from 
the PAU-* stuff it bitched about finding in the packed files.

But, to me, if it boils down to clamav not caring, then I guess I don't 
either, but it seems exactly the same as the little boy (clamav) crying 
wolf, eventually the wolf shows up for real and kills because everyone is 
ignoring the little boy (clamav) by then.

I would think clamav would be interested in fixing it, if for no other 
reason than as is, it's going to wind up being ignored in the background 
noises.
 
Thanks Al.

Cheers, Gene
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
My web page: <http://coyoteden.dyndns-free.com:85/gene> is up!
Remember, God could only create the world in 6 days because he didn't
have an established user base.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to