[prev in list] [next in list] [prev in thread] [next in thread] 

List:       clamav-users
Subject:    Re: [clamav-users] [clamav-virusdb] Signatures Published daily - 21467
From:       Al Varnell <alvarnell () mac ! com>
Date:       2016-03-19 9:05:32
Message-ID: B6DCFD45-5EBB-497B-AB0A-96F909C85DFA () mac ! com
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


FYI, if I ignore "Win.Trojan.Trojan-476" ([main.hdb] \
aa15bcf478d165efd2065190eb473bcb:544) all of the test files below are identified as \
"Clamav.Test.File-6" ([daily.hdb] aa15bcf478d165efd2065190eb473bcb:544).

-Al-

On Fri, Mar 18, 2016 at 07:40 PM, Al Varnell wrote:
> 
> Not sure exactly what this update was about (suspect a test), and perhaps I don't \
> have the correct Clamav.Text.File (s) but scanning the 0.99.1 source file I am \
> still getting the following: 
> > File Name	Infection Name	Status
> > /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam_cache_emax.tgz	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.ea05.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.bin-be.cpio	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam-aspack.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam-mew.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.exe.rtf	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.pdf	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clamjol.iso	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.chm	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.odc.cpio	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.ole.doc	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.impl.zip	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam-nsis.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.zip	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.ppt	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam-v3.rar	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.tar.gz	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.exe.mbox.uu	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.ea06.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam_IScab_int.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.sis	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam-fsg.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam-pespin.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam-petite.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam-upack.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam-upx.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam-v2.rar	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam-wwpack.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam-yc.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.7z	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.arj	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.bin-le.cpio	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.bz2.zip	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.cab	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.d64.zip	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.exe.binhex	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.exe.bz2	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.exe.html	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.exe.mbox.base64	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.exe.szdd	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.iso	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.mail	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.newc.cpio	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam.tnef	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam_IScab_ext.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam_ISmsi_ext.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/clam_ISmsi_int.exe	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/.split/split.clam.isoaa	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/.split/split.clam_IScab_ext.exeaa	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/.split/split.clam_IScab_int.exeaa	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/test/.split/split.clamjol.isoaa	Win.Trojan.Trojan-476	
> >  /Users/avarnell/Downloads/2016-03-02/clamav-0.99.1/unit_tests/clam-phish-exe	Win.Trojan.Trojan-476	
> > 
> 
> Can this be fixed or do I need to submit all fifty-five test files as FP's?
> 
> -Al-
> 
> > Begin forwarded message:
> > 
> > From: noreply@sourcefire.com
> > Subject: [clamav-virusdb] Signatures Published daily - 21467
> > Date: March 18, 2016 at 5:23:36 PM PDT
> > To: clamav-virusdb@lists.clamav.net
> > 
> > 
> > ClamAV Signature Publishing Notice
> > 
> > Datefile:       daily
> > Version:        21467
> > Publisher:       
> > New Sigs:       3
> > Dropped Sigs:   0
> > Ignored Sigs:   0
> > 
> > 
> > New Detection Signatures:
> > 
> > 
> > * Clamav.Test.File-6
> > 
> > * Clamav.Test.File-7
> > 
> > * Win.Trojan.Agent-1393459
> > 
> > 
> > Dropped Detection Signatures:
> > 
> > 
> > 
> > Ignored Detection Signatures:

-Al-
-- 
Al Varnell
Mountain View, CA


["smime.p7s" (smime.p7s)]

0�	*�H��

 �0�

10	+0�	*�H��


 �>0�:0�" 
ݡ=�XMQ�-ٿ�[ɭ0
	*�H��


0��10	UGB10UGreater Manchester10USalford10U
COMODO CA Limited1A0?U8COMODO SHA-256 Client Authentication and Secure Email \
CA0 160220000000Z
170219235959Z0"1 0	*�H��

	
alvarnell@mac.com0�
"0
	*�H��



�
0�

�

��xX��F/JS��j��]a�f��\jY��H�X��E��M3A} \
��7���_�>=��
>�g�rz�!TS0�(���4;�u!��d2�ط�q�S���� �x��_4$(��* \
!���V&���K�'��̢i������tʾ�tZ�A��/��I�{��
�"��MY��9�ӌӴ��s�q)� \
j��ܤ�'!�c���u�\n�p�@��Dh=�Z���ǚ�P{ \
��<۷�����ˁ�Lj���z�X�

��
�0�
�0U#0��ak�� �O�g� \
������0U|��|zA���E�&���,0U

� 0U

�00 \
U%0+
+

�1
0	`�H
��B

 0FU \
?0=0;+

�1



0+0)+

https://secure.comodo.net/CPS0]UV0T0R P \
N�Lhttp://crl.comodoca.com/COMODOSHA256ClientAuthenticationandSecureEmailCA.crl0��+ \



��0��0X+
0�Lhttp://crt.comodoca.com/COMODOSHA256ClientAuthenticationandS \
ecureEmailCA.crt0$+
0
�http://ocsp.comodoca.com0U0�alvarnell@mac.com0 \
	*�H�� 

�

4|=�o�f��3`Jk�7��Щ��?��I'���R1��"�݋�b�-�s(*b/�HA~�=�E"u�V \
?��I
.���͎L�QpI��t*֢�d2�;$4]�fd�`x�/U������ynU8!��q��.��o����mM|,�f=��k�[?s�	��\^�m%� \
"��9�H��ʉ��3;A��"q���͆�j�����x����3ن��ͤl>���0^�SW,��N�4� \
|	��G��^��1��0� 

0��0��10	UGB10UGreater \
Manchester10USalford10U COMODO CA Limited1A0?U8COMODO SHA-256 \
Client Authentication and Secure Email CAݡ=�XMQ�-ٿ�[ɭ0	+ �
�0	*�H�� \

	1	*�H�� 

0	*�H��

	1
160319090533Z0#	*�H��

	1f��VvZ3��zG�Ck�z�0� 	+

�71��0��0��10	UGB10UGreater \
Manchester10USalford10U COMODO CA Limited1A0?U8COMODO SHA-256 \
Client Authentication and Secure Email CAݡ=�XMQ�-ٿ�[ɭ0��*�H�� 
	1�� \
��0��10	UGB10UGreater Manchester10USalford10U COMODO CA \
Limited1A0?U8COMODO SHA-256 Client Authentication and Secure Email \
CAݡ=�XMQ�-ٿ�[ɭ0 	*�H��



�
{P�����B'SՅ!��C�PKbQ/�J��@��	+a��[��YvC~����R�^��gI�NT�_���+�Z�ß�%�B��势ؐ?�s���skܽê��i��IZ�"�o(x]�$�
 ؂�8M;�Y���^�q���5���d�3Ҍ��P��%`׃��M�dId9J���кY����9���3����k(�@_�6[���L��{"W�kx�����g� \
ާ�\� um\v��w%y�L



_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[prev in list] [next in list] [prev in thread] [next in thread]