Re: [clamav-users] Win.Trojan.DarkKomet-5711346-0 false positive?

2017-02-16 Thread Alain Zidouemba
That alert caused by Win.Trojan.DarkKomet-5711346-0 is an FP. The signature is being dropped. Thanks for reporting, - Alain On Thu, Feb 16, 2017 at 3:17 PM, Mark Foley wrote: > I am running a scheduled clamscan on the IMAP mail folders. The command is: > >

Re: [clamav-users] Win.Trojan.DarkKomet-5711346-0 false positive?

2017-02-16 Thread Mark Foley
On Thu, 16 Feb 2017 21:21:06 +0100 Reindl Harald wrote: > Am 16.02.2017 um 21:17 schrieb Mark Foley: > > I am running a scheduled clamscan on the IMAP mail folders. The command is: > > > > /usr/local/bin/clamscan -a --detect-pua=yes --no-summary --stdout > > --infected \

Re: [clamav-users] Win.Trojan.DarkKomet-5711346-0 false positive?

2017-02-16 Thread Reindl Harald
Am 16.02.2017 um 21:17 schrieb Mark Foley: I am running a scheduled clamscan on the IMAP mail folders. The command is: /usr/local/bin/clamscan -a --detect-pua=yes --no-summary --stdout --infected \ --recursive --allmatch --scan-mail=yes --scan-ole2=yes /home/HPRS/ This scan turns up the

[clamav-users] Win.Trojan.DarkKomet-5711346-0 false positive?

2017-02-16 Thread Mark Foley
I am running a scheduled clamscan on the IMAP mail folders. The command is: /usr/local/bin/clamscan -a --detect-pua=yes --no-summary --stdout --infected \ --recursive --allmatch --scan-mail=yes --scan-ole2=yes /home/HPRS/ This scan turns up the following: /home/HPRS/dsmith/Maildir/.Sent