Re: [clamav-users] Frequent PUA.Win.Trojan.EmbeddedPDF-1 false positives

The preferred, documented way to deal with a suspected False Positive here is to upload it to , although in past years PUA submissions were not allowed, so I can’t predict how successful you will be. ClamAV will always stop scanning after it finds the first infe

[clamav-users] Frequent PUA.Win.Trojan.EmbeddedPDF-1 false positives

Hi, It appears lately there are quite a few PUA.Win.Trojan.EmbeddedPDF-1 false positives. Scanning these messages manually shortly after they're quarantined doesn't find the same virus sig. In fact, many times it doesn't specifically include a PDF, but instead a docx file. I was just wondering if