Re: Found some virus on snortrules-snapshot-2983.tar.gz

[wkitty42--- via Snort-sigs <snort-sigs () lists snort org>]

On 10/1/20 7:25 AM, Deepan Babu via Snort-sigs wrote:
> Hey Joel,
>
> Just want to understand the status of this conversation as well as this file was 
> really infected or clamAV detected wrong?


rules files are text files... not binary files... they cannot be executed (in 
most cases)... based on that, the detection must be false... most likely clam 
detected the signature in the rule that snort uses to detect the same...


--
 NOTE: No off-list assistance is given without prior approval.
       *Please keep mailing list traffic on the list where it belongs!*
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" 
https://snort.org/downloads/#rule-downloads";>emerging threats</a>!