[clamav-users] Does Clamsubmit work?

Shawn Webb swebb at sourcefire.com
Tue Jun 24 20:44:38 UTC 2014


On Tue, Jun 24, 2014 at 4:36 PM, Daniel Quintiliani <danq at runbox.com> wrote:

> Hi,
>
> There was a recent thread about ClamAV's low detection rates when compared
> to other AVs on VirusTotal.
>
> When Clamsubmit came out I started using it to submit "false negatives",
> following the "two per day" rules of the Web site. (No such rule exists in
> the clamsubmit manpage.)
>
> I am wondering if there are lots of files in these queues, or the files
> submitted via the software are being ignored.
> I'd imagine ClamAV is shooting themselves in the foot for releasing this
> tool.
>
> Anyone know?


Hey Dan,

The clamsubmit application is in a very early state. It submits your
samples using the same HTTP interface as the web browser. It essentially
mimics doing a submission through your web browser. Given that our
submission system is supposed to email you with the results of your
submission, the output of the clamsubmit application is limited to errors.
If you see no errors, then the submission was successful. Further
enhancements will be on the way for the application, including showing
better success/fail messages.

Thanks,

Shawn



More information about the clamav-users mailing list