[clamav-users] Bad detection rate

[Walter Bürger]

Joel Esler (jesler) wrote:
> On Jun 25, 2014, at 4:23 AM, Walter Bürger <walter.buerger at arscons.de> wrote:
> 
>> bestellung_9AF6AAE4.exe
>> (MD5 186a1745b54467fa168309da93960df4)
>> 18 out of 54 scanners detected a trojan
>> (F-Secure named it Trojan.Injector.AWD)
>> but ClamAV did not detect it.
>>
>> I submitted both files to
>> http://www.clamav.net/lang/en/sendvirus/submit-malware
>>
>> And I submitted the same file as yesterday and the day before yesterday to virustotal.com<http://virustotal.com/>:
>>
>> Rechnung_23_14_06_198630274520031_telekom_deutschland_GmbH.exe
>> (MD5 ad690be247dda635781e20887fcac0e7)
> 
> Are you sure you submitted these files?  We don’t have them.
> 
> --
> Joel Esler
> Open Source Manager
> Threat Intelligence Team Lead
> Vulnerability Research Team
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> http://www.clamav.net/support/ml


Hi Joel,

yes I am sure I submitted
bestellung_074B5277.exe and
bestellung_9AF6AAE4.exe this morning:

Result:

Submission completed!
bestellung_9AF6AAE4.exe has been successfully sent to the virusdb 
maintainer team...

Thank you for helping the ClamAV project.

And I am sure I submitted
Rechnung_23_14_06_198630274520031_telekom_deutschland_GmbH.exe
on Monday, 23.06.2014

But I submitted all 3 files again, 2 minutes ago.

Best regards,
Walter.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 258 bytes
Desc: OpenPGP digital signature
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20140625/e309f632/attachment.sig>