[clamav-users] Clamscan infection that is not infected

[Joel Esler (jesler)]

Oh, sorry, didn’t see that Alain wrote this.  Apologies.


> On Apr 15, 2015, at 9:52 AM, Alain Zidouemba <azidouemba at sourcefire.com> wrote:
> 
> Can you provide a checksum for your sample?
> 
> Thanks,
> 
> - Alain
> 
> On Wed, Apr 15, 2015 at 9:50 AM, sanes <zds at wrzanes.com> wrote:
> 
>> Why does clamscan show this file infection, but a scan with VirusTotal.com
>> shows file is safe?  Which source should I trust?
>> 
>> c:\Windows\System32\mobsync.exe: Win.Trojan.Agent-863936 FOUND
>> 
>> 
>> _______________________________________________
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
>> 
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml