[clamav-users] Clamscan infection that is not infected

[Joel Esler (jesler)]

On Apr 15, 2015, at 9:50 AM, sanes <zds at wrzanes.com<mailto:zds at wrzanes.com>> wrote:

Why does clamscan show this file infection, but a scan with VirusTotal.com<http://VirusTotal.com>
shows file is safe?  Which source should I trust?

c:\Windows\System32\mobsync.exe: Win.Trojan.Agent-863936 FOUND



If you believe you have a false positive, please submit it here:

http://www.clamav.net/report/report-fp.html

--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos Group