Re: [clamav-users] handling multiple hits on CVE-2015-7645?

2015-11-30 Thread Orrick, Diana
Thanks for your response... I did join the clamav-virusdb mail list (since 11/10/2015) and have received *[clamav-virusdb] Update ...* messages Example: ClamAV database updated (30 Nov 2015 08-36 -0500): daily.cvd

Re: [clamav-users] handling multiple hits on CVE-2015-7645?

2015-11-22 Thread Steve basford
Create a localfp.ign2 file with the following line in it in your ClamAV database folder: Swf.Exploit.CVE_2015_7645 Restart clamd Hopefully the FP will be officially fixed soon. Cheers, Steve Web: sanesecurity.com Blog: sanesecurity.blogspot.com On 22 November 2015 12:52:04 "Orrick,

Re: [clamav-users] handling multiple hits on CVE-2015-7645?

2015-11-22 Thread Orrick, Diana
Thanks much for your prompt response! On 11/22/2015 9:11 AM, Steve basford wrote: Create a localfp.ign2 file with the following line in it in your ClamAV database folder: Swf.Exploit.CVE_2015_7645 Restart clamd Hopefully the FP will be officially fixed soon. Cheers, Steve Web:

Re: [clamav-users] handling multiple hits on CVE-2015-7645?

2015-11-22 Thread Orrick, Diana
Hello, I haven't has any response to filing a number of False Positive reports, should I have? I do appreciate the limits of the support folks, really. Just trying to understand how FP are handled and what the expectations should be. We've had another round of scans and the same servers,

Re: [clamav-users] handling multiple hits on CVE-2015-7645?

2015-11-22 Thread Al Varnell
On Sun, Nov 22, 2015 at 04:51 AM, Orrick, Diana wrote: > > Hello, > > I haven't has any response to filing a number of False Positive reports, > should I have? Have you joined the clamav-virusdb mailing-list? You won’t be notified unless you do. > I do appreciate the limits of the support