clamav-users May 2014 archive
Main Archive Page > Month Archives  > clamav-users archives
clamav-users: Re: [clamav-users] FP-Report: Email.Trojan-417

Re: [clamav-users] FP-Report: Email.Trojan-417

From: Al Varnell <alvarnell_at_nospam>
Date: Thu May 15 2014 - 07:11:48 GMT
To: ClamAV users ML <>

On Thu, May 15, 2014 at 12:04 AM, Julian Hansmann wrote:
> thank your very much for your responses. I added the signatures name
> to the whitelist which works flawless.

The signature was removed almost immediately after the announcement, so you should no longer need the whitelist.

> I can see that sending an attachment with an double extension is
> somehow sensless and suspicious however I think you can't take that as
> a virus. We're using ClamAV for all our e-mail customers and we do
> enforce quite strict policies when it comes to viruses. That's why
> this fp caused some trouble.
> Do you lists fp removals in your database update mails?

I have never seen a removal listed.

-- Al Varnell Mountain View, CA _______________________________________________ Help us build a comprehensive ClamAV guide: