Re: [clamav-users] Potentially False Positive, but I lost the file!

2017-01-22 Thread Reindl Harald
Am 22.01.2017 um 12:40 schrieb Groach: On 21/01/2017 23:27, Joel Esler (jesler) wrote: But the amount of offlist email I receive about your communication. A good try, Joel. If this was designed to make me think people are upset by my negative feedbacks about Clam signatures then you have

Re: [clamav-users] Potentially False Positive, but I lost the file!

2017-01-22 Thread Groach
On 22/01/2017 08:54, Antonio Piccolomini d'Aragona wrote: Wow guys I can't imagine I would have induced such a debate! :) Salve Anto. No debate. You asked a question and I answered with my opinion (to which you choose to accept or ignore). However, Joel starts going on making unrelated p

Re: [clamav-users] Potentially False Positive, but I lost the file!

2017-01-22 Thread Groach
On 21/01/2017 23:27, Joel Esler (jesler) wrote: But the amount of offlist email I receive about your communication. A good try, Joel. If this was designed to make me think people are upset by my negative feedbacks about Clam signatures then you have failed. I am more than happy to tell

Re: [clamav-users] Potentially False Positive, but I lost the file!

2017-01-22 Thread Antonio Piccolomini d'Aragona
Wow guys I can't imagine I would have induced such a debate! :) Il 22/gen/2017 00:27, "Joel Esler (jesler)" ha scritto: > This open source, free, project is made up of its community. While we > provide most of the detection and underlying systems that support the > project and community, the to

Re: [clamav-users] Potentially False Positive, but I lost the file!

2017-01-21 Thread Joel Esler (jesler)
This open source, free, project is made up of its community. While we provide most of the detection and underlying systems that support the project and community, the ton of community based signatures we ingest and publish are the real help. Obviously you are unhappy and have been unhappy with

Re: [clamav-users] Potentially False Positive, but I lost the file!

2017-01-21 Thread Joel Esler (jesler)
-- Sent from my iPhone > On Jan 21, 2017, at 11:16 AM, Alain Zidouemba > wrote: > > Antonio, > > Unfortunately, I can't find any record of us having ever published > Win.Trojan.Agent-18112140. > Could the name of the signature that caused the FP be slightly different? > > Alain > > On Sat,

Re: [clamav-users] Potentially False Positive, but I lost the file!

2017-01-21 Thread Joel Esler (jesler)
Groach -- Sent from my iPhone > On Jan 21, 2017, at 10:43 AM, Groach > wrote: > > I would put my house on that it was a false positive 100%. Reasons for > saying so: > > 1, It was a windows installation CD > 2, Its a file nearly 20 years old > 3, Clam signatures couldnt detect water in a

Re: [clamav-users] Potentially False Positive, but I lost the file!

2017-01-21 Thread Antonio Piccolomini d'Aragona
Great! I am glad I could help! Thanks for the support! Wishes Antonio 2017-01-21 18:50 GMT+01:00 Alain Zidouemba : > The signature Win.Trojan.Agent-1812140 is causing a FP on an Italian > Microsoft Office file from the mid-90s. I'm dropping the signature now. > > Thanks Antonio for taking the ti

Re: [clamav-users] Potentially False Positive, but I lost the file!

2017-01-21 Thread Alain Zidouemba
The signature Win.Trojan.Agent-1812140 is causing a FP on an Italian Microsoft Office file from the mid-90s. I'm dropping the signature now. Thanks Antonio for taking the time to report this despite no longer having access to the file that caused the FP. -Alain On Sat, Jan 21, 2017 at 11:38 AM,

Re: [clamav-users] Potentially False Positive, but I lost the file!

2017-01-21 Thread Antonio Piccolomini d'Aragona
Actually, there is a 1 less. It is Win.Trojan.Agent-1812140 (I looked in my Mac Cronology...where I looked for some ways to fix) 2017-01-21 17:16 GMT+01:00 Alain Zidouemba : > Antonio, > > Unfortunately, I can't find any record of us having ever published > Win.Trojan.Agent-18112140. > Could the

Re: [clamav-users] Potentially False Positive, but I lost the file!

2017-01-21 Thread Antonio Piccolomini d'Aragona
Yes, probably it is...as I said, I formatted and lost all the infos. 2017-01-21 17:16 GMT+01:00 Alain Zidouemba : > Antonio, > > Unfortunately, I can't find any record of us having ever published > Win.Trojan.Agent-18112140. > Could the name of the signature that caused the FP be slightly differe

Re: [clamav-users] Potentially False Positive, but I lost the file!

2017-01-21 Thread Alain Zidouemba
Antonio, Unfortunately, I can't find any record of us having ever published Win.Trojan.Agent-18112140. Could the name of the signature that caused the FP be slightly different? Alain On Sat, Jan 21, 2017 at 9:07 AM, Antonio Piccolomini d'Aragona < antpiccda...@gmail.com> wrote: > Hi, > I'm writ

[clamav-users] Potentially False Positive, but I lost the file!

2017-01-21 Thread Antonio Piccolomini d'Aragona
Hi, I'm writing for the following problem. After sudo freshclam, I had a scan of my system (UBUNTU 12.04 LTS) by sudo freshclam -r. ClamAv detected an infection relative to an ISO built from a Windows 95 installation CD. The signaled virus was said to be a Win.Trojan.Agent-18112140. Previous scans