Re: [clamav-users] Reporting false positives fails
Thank you for brining it to our attention Michael, I’ll take a look. On Jun 27, 2014, at 1:49 PM, Michael Graham wrote: > I think google is linking to an old version of the page. > > I googled "clamav report" and clicked the top link: > http://cgi.clamav.net/sendvirus.cgi > > But if I got to the website and follow the links I end up at: > > http://www.clamav.net/lang/en/sendvirus/submit-fp/ > > Perhaps someone maintaining the website can redirect the old link to the > right place? http://www.clamav.net/lang/en/sendvirus/ ? > > Thanks, > > > On Fri, 2014-06-27 at 10:40 -0700, Al Varnell wrote: >> You are right, it did just disappear, but your results are still strange. >> >> -Al- >> >> On Fri, Jun 27, 2014 at 10:36 AM, Michael Graham wrote: >>> >>> On Fri, 2014-06-27 at 13:30 -0400, Michael Graham wrote: I'm trying to report a bunch of suspected false positives to HTML.Exploit.CVE_2014_0322 which are being detected but the website just rejects it because it's already detected as a Virus (which is kind of the point Mr buggy website!). >>> >>> Seems like that signature has just been removed... so nevermind I >>> guess ;) >>> >>> Cheers, >> ___ >> Help us build a comprehensive ClamAV guide: >> https://github.com/vrtadmin/clamav-faq >> http://www.clamav.net/support/ml >> Report this message as spam >> http://joey.alba.local/quarantine/notifications/reportspam/message/1823803/check/9b95ae8cfb16c01010513ae62f64190d >> > > > -- > Michael Graham > > > ___ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] Reporting false positives fails
I think google is linking to an old version of the page. I googled "clamav report" and clicked the top link: http://cgi.clamav.net/sendvirus.cgi But if I got to the website and follow the links I end up at: http://www.clamav.net/lang/en/sendvirus/submit-fp/ Perhaps someone maintaining the website can redirect the old link to the right place? http://www.clamav.net/lang/en/sendvirus/ ? Thanks, On Fri, 2014-06-27 at 10:40 -0700, Al Varnell wrote: > You are right, it did just disappear, but your results are still strange. > > -Al- > > On Fri, Jun 27, 2014 at 10:36 AM, Michael Graham wrote: > > > > On Fri, 2014-06-27 at 13:30 -0400, Michael Graham wrote: > >> I'm trying to report a bunch of suspected false positives to > >> HTML.Exploit.CVE_2014_0322 which are being detected but the website just > >> rejects it because it's already detected as a Virus (which is kind of > >> the point Mr buggy website!). > > > > Seems like that signature has just been removed... so nevermind I > > guess ;) > > > > Cheers, > ___ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > http://www.clamav.net/support/ml > Report this message as spam > http://joey.alba.local/quarantine/notifications/reportspam/message/1823803/check/9b95ae8cfb16c01010513ae62f64190d > -- Michael Graham ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] Reporting false positives fails
You are right, it did just disappear, but your results are still strange. -Al- On Fri, Jun 27, 2014 at 10:36 AM, Michael Graham wrote: > > On Fri, 2014-06-27 at 13:30 -0400, Michael Graham wrote: >> I'm trying to report a bunch of suspected false positives to >> HTML.Exploit.CVE_2014_0322 which are being detected but the website just >> rejects it because it's already detected as a Virus (which is kind of >> the point Mr buggy website!). > > Seems like that signature has just been removed... so nevermind I > guess ;) > > Cheers, ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] Reporting false positives fails
On Fri, Jun 27, 2014 at 10:30 AM, Michael Graham wrote: > > Hi all, > > I'm trying to report a bunch of suspected false positives to > HTML.Exploit.CVE_2014_0322 which are being detected but the website just > rejects it because it's already detected as a Virus (which is kind of > the point Mr buggy website!). Are you sure you are reporting it using the “false positive report" form and not the "malware sample" form? I submitted one last evening for this same signature and it was accepted. Masters In Motion 1529702.ipa MD5=5b3eba0c77d477a949f61b2cf229c5ca I’ve had two ClamXav users report it for different files yesterday. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
Re: [clamav-users] Reporting false positives fails
On Fri, 2014-06-27 at 13:30 -0400, Michael Graham wrote: > I'm trying to report a bunch of suspected false positives to > HTML.Exploit.CVE_2014_0322 which are being detected but the website just > rejects it because it's already detected as a Virus (which is kind of > the point Mr buggy website!). Seems like that signature has just been removed... so nevermind I guess ;) Cheers, -- Michael Graham ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
