Re: [clamav-users] Html.Exploit.CVE_2017_8747-6336227-0 false positives

Some ClamXAV users reported this and since it's a Windows CVE it has been whitelisted for them. Be sure and submit a sample or two to > and return here with hash values for the file(s). -Al- On Wed, Jan 17, 2018 at 09:49 AM

Re: [clamav-users] Unable to upload a false positive.

Hello Ramos, Yes, we are aware of the issue on the site and are working to correct this for false positives, we are sorry for any inconvenience. Thank you, Tom M On 1/17/18, 3:52 PM, "clamav-users on behalf of Ramos Alexiou" wrote: >Hi, > >I have been trying to upload a false positiv

Re: [clamav-users] Unable to upload a false positive.

I've tried both filling up the required info first and attaching the file last and attaching the file first and filling up the rest of the info afterwards. It doesn't work either way. From: clamav-users on behalf of Joel Esler (jesler) Sent: Wednesday, January

Re: [clamav-users] Unable to upload a false positive.

We know about this issue and are currently working on fixing the issue. Please bear with us. It’s a specific corner case that some people are running into. For instance, are you uploading the file before you file out the form? Sent from my iPad > On Jan 17, 2018, at 3:53 PM, Ramos Alexiou

[clamav-users] Unable to upload a false positive.

Hi, I have been trying to upload a false positive file on the clamav site for several days now and it keeps asking for the file even if the file has been selected. The upload doesn't take place either. I have attempted the upload with Chrome 63.0.3239.132 and Firefox 57 on Linux (Xubuntu 16.04

[clamav-users] Html.Exploit.CVE_2017_8747-6336227-0 false positives

Html.Exploit.CVE_2017_8747-6336227-0 is triggering on the following content: https://ow1.res.office365.com/owamail/20180105.04/scripts/owa.mail.js https://display.ugc.bazaarvoice.com/static/BonTon/BTN/93/6060_4_0/en_US/stylesheets/screen.css https://display.ugc.bazaarvoice.com/static/Lenovo/main_s

Re: [clamav-users] Matching variant patterns in logical or Yara signatures

G.W. Haywood wrote: Hi there, On Tue, 16 Jan 2018, Kris Deugau wrote: I'm trying to create signatures to match a particular series of large to very large spams whose main identifier is a