Re: [clamav-users] FP Ppt.Exploit.CVE_2017_0199-6336815-1

This signature was fixed this morning. Sent from my iPhone On Oct 5, 2017, at 5:03 PM, Al Varnell > wrote: Please don't include signatures that apply to all file types in your email to the list as the message gets marked as infected. I'm sure some

Re: [clamav-users] FP Ppt.Exploit.CVE_2017_0199-6336815-1

Please don't include signatures that apply to all file types in your email to the list as the message gets marked as infected. I'm sure some of the intermediate servers will reject the message, as well. -Al- On Thu, Oct 05, 2017 at 01:59 PM, Vincent Fox wrote: > Hi, > > Getting hits today on

[clamav-users] FP Ppt.Exploit.CVE_2017_0199-6336815-1

Hi, Getting hits today on this entry in daily.cld. [root@smtp1 clamav]# sigtool --find-sigs Ppt.Exploit.CVE_2017_0199-6336815-1|sigtool --decode-sigs VIRUS NAME: Ppt.Exploit.CVE_2017_0199-6336815-1 TARGET TYPE: ANY FILE OFFSET: * DECODED SIGNATURE:

Re: [clamav-users] Unsubscribe not working

On Oct 5, 2017, at 7:38 AM, Matus UHLAR - fantomas > wrote: On 05.10.17 10:10, Bob Williams wrote: Apologies for generating noise. :-( I have visited the website several times and

[clamav-users] Fwd: [clamav-virusdb] Signatures Published daily - 23900

In keeping with one false positive reports I have 8 CentOS servers report below after Signatures Published daily - 23900 update: All attachment with extension *.xls have the same issue: VIRUS ALERT Our content checker found virus: Ppt.Exploit.CVE_2017_0199-6336815-1 Believe this is a

Re: [clamav-users] Unsubscribe not working

On 05.10.17 10:10, Bob Williams wrote: Apologies for generating noise. :-( I have visited the website several times and followed the unsubscribe process, but I am still receiving list mailings. I never received the confirmation

[clamav-users] Unsubscribe not working

Apologies for generating noise. :-( I have visited the website several times and followed the unsubscribe process, but I am still receiving list mailings. I never received the confirmation email, and yes, I've checked my spam/junk

Re: [clamav-users] Ppt.Exploit.CVE_2017_0199-6336815-1 FP?

Hi, We have a few this morning from a few of our servers too which contain docx files thisisasecretfile.docx: Ppt.Exploit.CVE_2017_0199-6336815-1 FOUND Regards Simon > On 5 Oct 2017, at 09:49, Al Varnell wrote: > > Please don't include signatures that apply to "Any File"

Re: [clamav-users] Ppt.Exploit.CVE_2017_0199-6336815-1 FP?

Please don't include signatures that apply to "Any File" in an e-mail as it was detected as infected upon arrival and could easily be blocked by intermediate mail servers. -Al- On Thu, Oct 05, 2017 at 01:42 AM, Hajo Locke wrote: > since yesterday we found a lot of malware called >

[clamav-users] Ppt.Exploit.CVE_2017_0199-6336815-1 FP?

Hello List, since yesterday we found a lot of malware called Ppt.Exploit.CVE_2017_0199-6336815-1 Hitrate is extremly increasing. Currently i believe this is a FP. Signature looks short: