On Wed, 28 Sep 2016, Joel Esler (jesler) wrote:

> These signatures were generated out of attachments to know bad spam files.   
> We'll have a look.
>

clamscan -z on pdf shows:

Win.Trojan.Agent-1696579
Win.Trojan.Agent-1696632
Win.Trojan.Agent-1696690
Win.Trojan.Agent-1696882
Win.Trojan.Agent-1697875
Win.Trojan.Agent-1697950
Win.Trojan.Agent-1698234
Win.Trojan.Agent-1698242

I'd speculate that all these sigs are broken any maybe many more for other
null byte file sizes not present in my pdf.

David
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to