Re: [clamav-users] Reporting false positives fails
Thank you for brining it to our attention Michael, I’ll take a look. On Jun 27, 2014, at 1:49 PM, Michael Graham mgra...@bloxx.com wrote: I think google is linking to an old version of the page. I googled clamav report and clicked the top link: http://cgi.clamav.net/sendvirus.cgi But if I got to the website and follow the links I end up at: http://www.clamav.net/lang/en/sendvirus/submit-fp/ Perhaps someone maintaining the website can redirect the old link to the right place? http://www.clamav.net/lang/en/sendvirus/ ? Thanks, On Fri, 2014-06-27 at 10:40 -0700, Al Varnell wrote: You are right, it did just disappear, but your results are still strange. -Al- On Fri, Jun 27, 2014 at 10:36 AM, Michael Graham wrote: On Fri, 2014-06-27 at 13:30 -0400, Michael Graham wrote: I'm trying to report a bunch of suspected false positives to HTML.Exploit.CVE_2014_0322 which are being detected but the website just rejects it because it's already detected as a Virus (which is kind of the point Mr buggy website!). Seems like that signature has just been removed... so nevermind I guess ;) Cheers, ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml Report this message as spam http://joey.alba.local/quarantine/notifications/reportspam/message/1823803/check/9b95ae8cfb16c01010513ae62f64190d -- Michael Graham mgra...@bloxx.com ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] Reporting false positives fails
On Fri, 2014-06-27 at 13:30 -0400, Michael Graham wrote: I'm trying to report a bunch of suspected false positives to HTML.Exploit.CVE_2014_0322 which are being detected but the website just rejects it because it's already detected as a Virus (which is kind of the point Mr buggy website!). Seems like that signature has just been removed... so nevermind I guess ;) Cheers, -- Michael Graham mgra...@bloxx.com ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] Reporting false positives fails
On Fri, Jun 27, 2014 at 10:30 AM, Michael Graham wrote: Hi all, I'm trying to report a bunch of suspected false positives to HTML.Exploit.CVE_2014_0322 which are being detected but the website just rejects it because it's already detected as a Virus (which is kind of the point Mr buggy website!). Are you sure you are reporting it using the “false positive report form and not the malware sample form? I submitted one last evening for this same signature and it was accepted. Masters In Motion 1529702.ipa MD5=5b3eba0c77d477a949f61b2cf229c5ca I’ve had two ClamXav users report it for different files yesterday. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
[clamav-users] Reporting false positives fails
Hi all, I'm trying to report a bunch of suspected false positives to HTML.Exploit.CVE_2014_0322 which are being detected but the website just rejects it because it's already detected as a Virus (which is kind of the point Mr buggy website!). Examples can be found of sites like www.superdrug.com (a UK pharmacist). I'm not sending the direct link in case it causes problems with people's mail filter. How can I report these? Cheers, -- Michael Graham mgra...@bloxx.com ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] Reporting false positives fails
You are right, it did just disappear, but your results are still strange. -Al- On Fri, Jun 27, 2014 at 10:36 AM, Michael Graham wrote: On Fri, 2014-06-27 at 13:30 -0400, Michael Graham wrote: I'm trying to report a bunch of suspected false positives to HTML.Exploit.CVE_2014_0322 which are being detected but the website just rejects it because it's already detected as a Virus (which is kind of the point Mr buggy website!). Seems like that signature has just been removed... so nevermind I guess ;) Cheers, ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] Reporting false positives fails
I think google is linking to an old version of the page. I googled clamav report and clicked the top link: http://cgi.clamav.net/sendvirus.cgi But if I got to the website and follow the links I end up at: http://www.clamav.net/lang/en/sendvirus/submit-fp/ Perhaps someone maintaining the website can redirect the old link to the right place? http://www.clamav.net/lang/en/sendvirus/ ? Thanks, On Fri, 2014-06-27 at 10:40 -0700, Al Varnell wrote: You are right, it did just disappear, but your results are still strange. -Al- On Fri, Jun 27, 2014 at 10:36 AM, Michael Graham wrote: On Fri, 2014-06-27 at 13:30 -0400, Michael Graham wrote: I'm trying to report a bunch of suspected false positives to HTML.Exploit.CVE_2014_0322 which are being detected but the website just rejects it because it's already detected as a Virus (which is kind of the point Mr buggy website!). Seems like that signature has just been removed... so nevermind I guess ;) Cheers, ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml Report this message as spam http://joey.alba.local/quarantine/notifications/reportspam/message/1823803/check/9b95ae8cfb16c01010513ae62f64190d -- Michael Graham mgra...@bloxx.com ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
