Re: [clamav-users] False positives submitted but still viewed as viruses

[Klaas TJEBBES]

Yes, this page http://www.clamav.net/reports/fp


Le 08/02/2016 21:17, Alain Zidouemba a écrit :

Were the files submitted through this form? http://www.clamav.net/reports/fp

Thanks,

- Alain

On Mon, Feb 8, 2016 at 9:33 AM, Klaas TJEBBES 
wrote:


Thanks for your answer.

Here are the md5sums :
acad82626e83064ce8792bb17f568726
21c85b53fccf0712aadad1127115f4ff
39cf4db0bba92ae1c18869198fed8e83
77273b2e4e4f4f39718e0ad9a8c39075
9fb8f134217e4a2421fbaa61f7a88838
867fd8e85ffc806162fdf6d6bda94ccd



Le 08/02/2016 15:00, Steve Basford a écrit :



On Mon, February 8, 2016 1:27 pm, Klaas TJEBBES wrote:


Hi.


I've submitted several false positives but at the end of the submission
form I don't get any "submission-ID" so I cannot track my submissions.

The files I've submitted (a week ago) are still detected as viruses.

Hi,


If you don't know the ID, can you post a list of md5(s) for the team to
lookup (I think that's currently how it works)

Cheers,

Steve

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] False positives submitted but still viewed as viruses

[Klaas TJEBBES]

Thanks for your answer.

Here are the md5sums :
acad82626e83064ce8792bb17f568726
21c85b53fccf0712aadad1127115f4ff
39cf4db0bba92ae1c18869198fed8e83
77273b2e4e4f4f39718e0ad9a8c39075
9fb8f134217e4a2421fbaa61f7a88838
867fd8e85ffc806162fdf6d6bda94ccd



Le 08/02/2016 15:00, Steve Basford a écrit :


On Mon, February 8, 2016 1:27 pm, Klaas TJEBBES wrote:

Hi.


I've submitted several false positives but at the end of the submission
form I don't get any "submission-ID" so I cannot track my submissions.

The files I've submitted (a week ago) are still detected as viruses.


Hi,

If you don't know the ID, can you post a list of md5(s) for the team to
lookup (I think that's currently how it works)

Cheers,

Steve

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] False positives submitted but still viewed as viruses

[Maarten Broekman]

If you don't want to wait, you can also whitelist the files in your own
database files.

Run either of the following:
  sigtool --sha256 
  sigtool --md5 

Put the output into a '.fp' file in your db directory and that should
whitelist that specific file so it's not reported.

--Maarten


On Mon, Feb 8, 2016 at 9:00 AM, Steve Basford <
steveb_cla...@sanesecurity.com> wrote:

>
> On Mon, February 8, 2016 1:27 pm, Klaas TJEBBES wrote:
> > Hi.
> >
> >
> > I've submitted several false positives but at the end of the submission
> > form I don't get any "submission-ID" so I cannot track my submissions.
> >
> > The files I've submitted (a week ago) are still detected as viruses.
> >
> Hi,
>
> If you don't know the ID, can you post a list of md5(s) for the team to
> lookup (I think that's currently how it works)
>
> Cheers,
>
> Steve
> Web : sanesecurity.com
> Blog: sanesecurity.blogspot.com
> Twitter: @sanesecurity
>
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] False positives submitted but still viewed as viruses

[Steve Basford]

On Mon, February 8, 2016 1:27 pm, Klaas TJEBBES wrote:
> Hi.
>
>
> I've submitted several false positives but at the end of the submission
> form I don't get any "submission-ID" so I cannot track my submissions.
>
> The files I've submitted (a week ago) are still detected as viruses.
>
Hi,

If you don't know the ID, can you post a list of md5(s) for the team to
lookup (I think that's currently how it works)

Cheers,

Steve
Web : sanesecurity.com
Blog: sanesecurity.blogspot.com
Twitter: @sanesecurity

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] False positives submitted but still viewed as viruses

[Alain Zidouemba]

Were the files submitted through this form? http://www.clamav.net/reports/fp

Thanks,

- Alain

On Mon, Feb 8, 2016 at 9:33 AM, Klaas TJEBBES 
wrote:

> Thanks for your answer.
>
> Here are the md5sums :
> acad82626e83064ce8792bb17f568726
> 21c85b53fccf0712aadad1127115f4ff
> 39cf4db0bba92ae1c18869198fed8e83
> 77273b2e4e4f4f39718e0ad9a8c39075
> 9fb8f134217e4a2421fbaa61f7a88838
> 867fd8e85ffc806162fdf6d6bda94ccd
>
>
>
> Le 08/02/2016 15:00, Steve Basford a écrit :
>
>>
>> On Mon, February 8, 2016 1:27 pm, Klaas TJEBBES wrote:
>>
>>> Hi.
>>>
>>>
>>> I've submitted several false positives but at the end of the submission
>>> form I don't get any "submission-ID" so I cannot track my submissions.
>>>
>>> The files I've submitted (a week ago) are still detected as viruses.
>>>
>>> Hi,
>>
>> If you don't know the ID, can you post a list of md5(s) for the team to
>> lookup (I think that's currently how it works)
>>
>> Cheers,
>>
>> Steve
>>
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] False positives submitted but still viewed as viruses

[Al Varnell]

Even with a submission-ID (which I have not recently received either) you won’t 
really be able to “track” a submission.

You will be notified when your sample has been processed by e-mail (if signed 
up for clamav-virusdb) at which time you will have to search recent releases 
for your name to verify which update it includes it, then run ClamAV to find 
out whether it was removed or not.

Not particularly user friendly, but that’s the way it currently works.

-Al-

On Mon, Feb 08, 2016 at 05:27 AM, Klaas TJEBBES wrote:
> 
> I've submitted several false positives but at the end of the submission form 
> I don't get any "submission-ID" so I cannot track my submissions.


smime.p7s
Description: S/MIME cryptographic signature
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml