ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
False Positive
gerrydsa


Joined: 17 Nov 2015
Posts: 3
Reply with quote
Hi Folks, we publish content using Articulate Presenter, the output is a SCORM in .zip format. Within that there are lots of files including some .swf files. Since yesterday ClamAV is detecting the .swf files as CVE-2015-5548 however this exploit is dependant of Flash player 18 where as we are running 19 this long time.

A scan of the suspect file on https://www.virustotal.com shows ClamAV as the only scanner to flag it.

Can I submit the file somewhere for your review?
Thanks
Gerry
View user's profileSend private message
ROCKNROLLKID


Joined: 23 Sep 2013
Posts: 562
Location: **UNKNOWN**
Reply with quote
Hello. Please follow our false positive guide located here: http://forums.clamwin.com/viewtopic.php?t=4239

For future reference, you may view this guide at anytime. It is stickied to the top in almost every forum section.
View user's profileSend private message
gerrydsa


Joined: 17 Nov 2015
Posts: 3
Reply with quote
Hi,

I did this already, I searched for CVE-2015-5548 but found nothing. It is a clean install ClamWin.
Thanks
Gerry
View user's profileSend private message
gerrydsa


Joined: 17 Nov 2015
Posts: 3
Reply with quote
https://www.virustotal.com/en/file/b6d4f8cf0d97a6424be6208bb85cecd0a83a2560fd4ea65d5ce41718d335052f/analysis/
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4376
Location: USA
Reply with quote
Virus Total sends FPs to the AV involved, but it will probably help to send FPs to Clam AV also as ClamWin uses the Clam AV database and virus signatures.

Regards,
View user's profileSend private message
ROCKNROLLKID


Joined: 23 Sep 2013
Posts: 562
Location: **UNKNOWN**
Reply with quote
Glad to see you have returned Bob.

Looks like a bad exploit signature. Give ti sometime and the ClamAV team will have it fixed.
View user's profileSend private message
False Positive
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic