[clamav-users] false positive sample

[Joel Esler (jesler)]

On Aug 25, 2014, at 12:56 PM, G.W. Haywood <clamav at jubileegroup.co.uk<mailto:clamav at jubileegroup.co.uk>> wrote:

Hi there,

On Mon, 25 Aug 2014, it was difficult to figure out who wrote:

Good thing I only use Linux now, where the effectiveness of
antivirus software isn't too important. I just wish ClamAV
developers were more attentive to their product, which they haven't
been since Cisco bought Sourcefire.
I?d disagree here.  In fact, we?ve only added to the team since the
Cisco purchase.  ...

There's a distinction between adding to the team and improving it.

Seems to me I've been reading the same old complaints here on the
ClamAV mailing list for years now.

Please remember that ClamAV is an open source product.  Anyone from the community may take the engine we build, write their own signatures for malware and push them out.  We’d love it if people push them to us (hence why the community signatures mailing list exists), so the whole community can take advantage of them, heck, we’d love it if Sanesecurity would like to participate with us and push the rules they have out via the official update mechanism, it only serves to help the whole community instead of fragmenting it.  We’ll work with anyone to make the proper credit is given.

However, despite our many attempts to get people to contribute back to the project they get for free, only a handful of submitters do.  We are grateful for each and everyone that uses our software, and even more grateful for those of you that want to give back to the community as a whole, but we’d love it if more did.

Good job I only use ClamAV because of the third party databases like
Sanesecurity.

And it would *really* help if the people who use this list learn how
to write to mailing lists.

I’m not going to be “strict mailing list guy” on here.  Despite our repeated attempts, there are people that aren’t going to be able to, nor do they want to do things like inline or bottom post, and you know what?  I’m not going to stress over it.  I’m a realist, I know I’m not going be the mailing list police and get my blood pressure up, over what is really, just a form of communication.  I don’t need that undue stress in my life.  What I am going to do?  Start banning people for top posting?  Nope.

That used to be a “requirement” on the list, and no one followed it anyway, so I removed it.

--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos