Mailing List Archive: PUA false positive report.

PUA false positive report.

biplab.kumar at gmail

Jun 7, 2011, 10:14 PM

Post #1 of 2 (6829 views)

Hi,

One of our customer is reporting a PUA false positive wherein a PDF file is
being classified as *PUA.Script.PDF.EmbeddedJS. *Since the virus submission
page clearly states that it will ignore false positives for PUA,
is there a different channel for submitting false positive report for PUA or
are they never fixed?.

Any information on this would be much appreciated.

Thanks and Regards,
Biplab Swain
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

Re: PUA false positive report. [ In reply to ]

azidouemba at sourcefire

Jun 8, 2011, 8:04 AM

Post #2 of 2 (6674 views)

Biplab,

PUA.Script.PDF.EmbeddedJS has been replaced with PUA
.Script.PDF.EmbeddedJS-1. PUA.Script.PDF.EmbeddedJavascript has been
published as well.

Please let us know if you are still experiencing problems with the new
signatures. Please submit any FP report through the submission page (for
now, please disregard the the statement about PUA FP reports).

Thanks,

-Alain
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32