[clamav-users] 2 questions

[Al Varnell]

On Mon, Nov 09, 2015 at 02:10 AM, Michiel van Es wrote:
> 1) I saw in the clamav-users at lists.clamav.net list documentation that I can
> read the documentation here:
> 
> http://www.clamav.net/support/ml , http://www.clamav.net/support/faq
> and http://wiki.clamav.net


Actually, a better source for all applicable documentation is:  
<http://www.clamav.net/documentation/>

> 2) I uploaded 2 or 3 times a malware sample to the upload link at the
> clamav.net website (trackandtrace.zip , see also VT link:
> https://www.virustotal.com/en/file/417acbe24ad5e16d7dceb5b5f2293acc388432448b3a068903d963e4efc672c6/analysis/1447063546/)
> in the last weeks but don't see the file added to the definitions.
> I don't know how VT shares this information but is this information auto
> added to the definitions?
> What can I do to ensure this file/malware is found by ClamAV?

From my observations it takes much more than a week for anything uploaded to VirusTotal to make it’s way into the database, dependent to some extent on the validity and seriousness of the perceived threat.

You can speed that up a little by also uploading it directly to the ClamAV Signature Team directly at 
<http://www.clamav.net/reports/malware>.

-Al-
-- 
Al Varnell
Mountain View, CA




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3569 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20151109/c5367438/attachment.bin>