Mailing List Archive

This signature was dropped earlier today, due to another FP report. You'll
want to update your CVDs as soon as possible.

On Tue, May 30, 2023 at 1:36?AM oo ma via clamav-users <
clamav-users@lists.clamav.net> wrote:

> Hello List,
> since the update to version 26922 we observe a
> "Win.Virus.Memery-10002766-0 FOUND"
> at "/usr/lib/python3.7/site-packages/pip/_vendor/distlib/t32.exe"
> and
> "/usr/lib/python3.7/ensurepip/_bundeled/pip-20.1.1-py2.py3-none-any.whl"
>
> I don't know what kind of wonder it is, and I don't know if it's good to
> keep using it.
> Since the server is AmazonLinux, I don't think exe files are used, but is
> it okay to wait and see?
>
> Has anyone seen this, too?
>
> _______________________________________________
>
> Manage your clamav-users mailing list subscription / unsubscribe:
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat
>


--
Christopher Marczewski
Research Engineer, Talos
Cisco Systems
443-832-2975

Thank you. It was helpful!
________________________________
???: clamav-users <clamav-users-bounces@lists.clamav.net> ? Christopher Marczewski <cmarczewski@sourcefire.com> ??????
????: 2023?5?30? 23:58
??: ClamAV users ML <clamav-users@lists.clamav.net>
??: Re: [clamav-users] Win.Virus.Memery-10002766-0 on version 26922

This signature was dropped earlier today, due to another FP report. You'll want to update your CVDs as soon as possible.

On Tue, May 30, 2023 at 1:36?AM oo ma via clamav-users <clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>> wrote:
Hello List,
since the update to version 26922 we observe a "Win.Virus.Memery-10002766-0 FOUND"
at "/usr/lib/python3.7/site-packages/pip/_vendor/distlib/t32.exe"
and
"/usr/lib/python3.7/ensurepip/_bundeled/pip-20.1.1-py2.py3-none-any.whl"

I don't know what kind of wonder it is, and I don't know if it's good to keep using it.
Since the server is AmazonLinux, I don't think exe files are used, but is it okay to wait and see?

Has anyone seen this, too?

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat


--
Christopher Marczewski
Research Engineer, Talos
Cisco Systems
443-832-2975