Re: [clamav-users] Java.Malware fps

2017-04-07 Thread Al Varnell
On Fri, Apr 07, 2017 at 12:21 AM, Steve Basford wrote: > On Fri, April 7, 2017 7:24 am, Henrik K wrote: >> >> Whos' flooding crappy samples around, and why is ClamAV making sigs of >> tiny class files like >> org/eclipse/aether/impl/RemoteRepositoryManager.class? >> > The odd few I've checked

Re: [clamav-users] Java.Malware fps

2017-04-07 Thread Steve Basford
On Fri, April 7, 2017 7:24 am, Henrik K wrote: > > Whos' flooding crappy samples around, and why is ClamAV making sigs of > tiny class files like > org/eclipse/aether/impl/RemoteRepositoryManager.class? > > The odd few I've checked are hashes in daily.hsb:

Re: [clamav-users] Java.Malware fps

2017-04-07 Thread Reindl Harald
Am 07.04.2017 um 08:24 schrieb Henrik K: Whos' flooding crappy samples around, and why is ClamAV making sigs of tiny class files like org/eclipse/aether/impl/RemoteRepositoryManager.class? because .jar malware attachments in mails are not uncommon and the major usecase of ClamAV is on a

[clamav-users] Java.Malware fps

2017-04-07 Thread Henrik K
Whos' flooding crappy samples around, and why is ClamAV making sigs of tiny class files like org/eclipse/aether/impl/RemoteRepositoryManager.class? .m2/repository/org/codehaus/plexus/plexus-interpolation/1.19/plexus-interpolation-1.19.jar: Java.Malware.Agent-6205983-0 FOUND