[clamav-users] Bad detection rate

[Bowie Bailey]

On 6/24/2014 9:53 AM, Walter Bürger wrote:
> Hi dear ClamAV team,
>
> I submitted the same file as yesterday to virustotal.com:
>
> Rechnung_23_14_06_198630274520031_telekom_deutschland_GmbH.exe
> (MD5 ad690be247dda635781e20887fcac0e7)
>
> 30 out of 54 scanners detected a virus
> (NOD32 named it Win32/Emotet.AA)
> but ClamAV did not detect it.
>
> I am just curious why ClamAV still can't detect it.

AFAIK, virustotal only uses the official signatures.  Your samples were 
detected by a Sanesecurity unofficial signature.

-- 
Bowie