Yup, that’s one of mine. Glad to see my system is working ;) As far as why it didn’t work, I’ll have to defer this to Steve on the dev team.
-- Joel Esler | Talos: Manager| jes...@cisco.com<mailto:jes...@cisco.com> On Oct 19, 2016, at 10:16 AM, Steve Basford <steveb_cla...@sanesecurity.com<mailto:steveb_cla...@sanesecurity.com>> wrote: On Wed, October 19, 2016 3:12 pm, Joel Esler (jesler) wrote: Heino, Can you clarify which sig caught it? Doc.Dropper.Agent-177659 is not an actual sig number. Damn cut and paste... it's: Doc.Dropper.Agent-1776597 (a hash) -- Cheers, Steve Twitter: @sanesecurity _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
