possible false flag on on clamav with fangfrisch database

Ozzy Helix

unread,

Mar 21, 2024, 6:49:47 PMMar 21

to forecastfox-users

I use Linux and ran the clamav antivirus with the fangfrisch database to check for malware and I believe this is a mistaken flagging of the extension if this can be confirmed that would be great Ozzy

/home/ozzy/.mozilla/firefox/j4ngi6kg.dev-edition-default-1704982310032/extensions/forecastfox@s3_fix_version.xpi: Sa

nesecurity.Foxhole.JS_Zip_16.UNOFFICIAL FOUND

Oleksandr Popov

unread,

Mar 30, 2024, 7:50:14 AMMar 30

to forecastfox-users

This is a false positive scenario, that may appear because the amount of javascript files within the plugin or the fact that it contains files named xxxx.yyyy.js ( seeing the files as double extension and triggering the false positive ) as you can see here : https://sanesecurity.com/foxhole-databases/

четверг, 21 марта 2024 г. в 23:49:47 UTC+1, Ozzy Helix:

Benjamin Hirlston (Ozzy Helix)

unread,

Jun 9, 2024, 1:18:59 AMJun 9

to forecastfox-users

I was testing clamav and got a bunch of hits on all my addons so its fine all false positives

Reply all

Reply to author

Forward