[clamav-users] FN with unknown virus attachment

[Steve Basford]

On Sat, June 21, 2014 2:00 pm, Alex wrote:
> Hi,
> I'm using clamav-0.98.4 on fedora20 with the sanesecurity and safebrowsing
>  sigs and still seeing an unknown virus pass through our systems. I've
> submitted it to the clamav false-negative upload, but haven't received a
> response, and 24hrs later it's still not being tagged. I was hoping
> someone could help me identify it and determine the risk.
Hi Alex,

Just seen the sample posted and it's an interesting one.

Detection added, in both rogue.hdb and also mainly, phish.ndb.

Should be on the mirrors right now.

Cheers,

Steve
Sanesecurity.com