Re: [clamav-users] Many false positives: MBL_312128 / MBL_303159

2012-08-08 Thread Laurent CARON
On Tue, Aug 07, 2012 at 03:00:15PM -0400, Bowie Bailey wrote:
> On 8/7/2012 2:46 PM, Matt Olney wrote:
> >We've heard similar complaints on IRC.  It looks like downloads may be
> >broken from MBL.  You'll have to work with them to address the issue.
> 
> My last download was 3 hours ago.  I don't see a problem from here.
> 
> Also, I do not see the problematic rules in the current MBL database.

After last update of this morning the problem is solved.


___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[clamav-users] Many false positives: MBL_312128 / MBL_303159

2012-08-07 Thread Laurent CARON

Hi,

I'm currently experiencing lots of FP.

Those FP range from automatic apticron debian mails, mails with simple 
clean PDF files, CSV files, ...


Do any of you experience the same ?

Thanks

Laurent
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [clamav-users] Major new false positive? BC.Exploit.CVE_2012_0184

2012-05-11 Thread Laurent CARON

On 11/05/2012 18:14, Cedric Knight wrote:

Hi

I'm seeing BC.Exploit.CVE_2012_0184 hit a wide variety of attachments as
of 14:40 UTC this afternoon.  Will submit a sample the usual way, but
wanted to warn that it just seems to be quite extensive.   (also
possibly BC.Exploit.CVE_2012_0165).

Anyone else seeing this?




Hi,

For me, lots of:
BC.Exploit.CVE_2012_0184
BC.Exploit.CVE_2012_0165

Regards

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml