Clam.Win.Exploit.CVE_2019_0903-6966169-0 false positives

[Daryl 0]

Hello Support & Fellow Users

Immunet with Clam AV has just falsely quarantined 1000's of files on my server. Predominantly PDF with some XLS & MSG as well.

Using the Immunet desktop program, I can only scroll through a very small portion of the list before it does the "LOADING" and then jumps back up the list. I narrowed the VIEW BY down to 1 day and Quarantined File History and same result. I'm unable to list all the files quarantined. The list is so long that most times it causes Immunet to crash.

How can I get my 1000's of files back?

Server = Windows Std 2016.

Immunet = 6.3.0.10988

Thanks in advance for your assistance.

[jersam 0]

big problem...

[Wookiee 37]

Submit a FP report on immunet.com so the sig writers can look at it

[Aris 3]

the problem still exists... it is very annoying

[Aris 3]

i think i will give a try to windows defender! sorry

[Wookiee 37]

It should be fixed now, you will want to update your signature set. It was a ClamAV signature that caused the issue.

[Aris 3]

yes, i have already set it up again... once more...

I dont know why, but I like using this kind of products... I remember F-prot when it was a great product, about 20 years ago...

Maybe they should check their signatures in some machines before using them worldwide.