On 22 July 2022 10:15:27 Thomas Barth via clamav-users
wrote:
Hello,
I use ClamAV unofficial signatures and it seems that I get a false
positiv, I m not sure. A known person with a gmail-address and MS
Outlook 16.0 X-Mailer tries to send me a mail with a link to google docs
(Google Sheets)
Hi!
Am 2022-07-22 13:31, schrieb G.W. Haywood via clamav-users:
Having said that I don't see the problem that you've found. In case
it helps you, here's the directory listing and md5sum of the file
currently in use here. It's pretty old, and I can't say that I've
noticed very many useful
Hi,
after checking the decoded signature I tried to whitelist the signature
as described on your website
https://www.securiteinfo.com/services-cybersecurite/anti-spam-anti-virus/whitelisting_clamav_signatures.shtml
One line of the decoded sig was like DECODED SIGNATURE: d o c s . g o o
g l e
Hi there,
On Fri, 22 Jul 2022, Thomas Barth via clamav-users wrote:
...
Google docs under general suspicion :-)
...
Correct. :)
--
73,
Ged.
___
clamav-users mailing list
clamav-users@lists.clamav.net
Hello,
I use ClamAV unofficial signatures and it seems that I get a false
positiv, I m not sure. A known person with a gmail-address and MS
Outlook 16.0 X-Mailer tries to send me a mail with a link to google docs
(Google Sheets) and Amavis refuses to accept this mail. I scanned this
file in
Hi there,
On Fri, 22 Jul 2022, Thomas Barth via clamav-users wrote:
I use ClamAV unofficial signatures and it seems that I get a false positiv ...
I think you're probably right, but to get a dozen or so other opinions
you can submit the file to VirusTotal or Jotti's Malware Scan:
On Thu, 21 Jul 2022, Paul Kosinski via clamav-users wrote:
Building 0.103.6, I ran 'configure' with the option
"--disable-clamonaccess" (instead of "--disable-clamonacc") and got
no error or warning that the option was not recognized.
I did this because I realized that I had still been using
Thomas Barth via clamav-users writes:
> After restarting the clamav-daemon it has found another MBL_x
> with the same decoded signature. I dont know how many virus names for
> that domain exist. Because it can take up to a minute to check the
> "virusmail" (cpu too slow?) So I better
