Re: [clamav-users] False positive?

2024-04-08 Thread David Precious via clamav-users
On Mon, 8 Apr 2024 11:26:15 -0400 Richard wrote: > After updating to the latest virus signature files using > freshclam, I am suddenly getting infected file reports > that I never got before. Almost certainly yes. This seems to happen periodically, for those same Python PIP exe files (which I

Re: [clamav-users] False positive?

2024-04-08 Thread Andrew C Aitchison via clamav-users
There are also reports on Reddit today of ClamAV finding this: https://www.reddit.com/r/flatpak/comments/1byn8og/clamav_detecting_winvirusexpiro100265760_malware/?rdt=45424 One reply says: I ran one of the files tagged as a virus by Clamav through VirusTotal.com; out of 64 anti-virus

[clamav-users] False positive?

2024-04-08 Thread Richard
After updating to the latest virus signature files using freshclam, I am suddenly getting infected file reports that I never got before. I don't think the affected files have changed, at least the creation dates and size in bytes are still the same. How can I tell whether this is a real virus or

Re: [clamav-users] freshclam with lambda and S3

2024-04-08 Thread Andrew C Aitchison via clamav-users
On Wed, 3 Apr 2024, Matthew Hibberd via clamav-users wrote: * I am hosting the ClamAV DB files on S3. * I have a lambda routinely running as a cron job that downloads the latest DB files from S3 to a local dir and runs freshclam against said dir as its database directory. *