[clamav-users] Submission of samples, Virustotal, clamsend, webform.

[magnus]

Hello!

I am wondering regarding the prefered method of submitting samlpes to
the clamav-project for inclusion in the official signatures. I come in
contact with a fair amount of samples, and from time to time i test them
against clamav with the latest official signatures installed. I
sometimes submit samples to you via the web-form at
http://cgi.clamav.net/sendvirus.cgi. I am also a frequent user of the
Virustotal service, where i upload many of the samples as well to
determine what it is and if it has been seen before.

There are a number to submit samples to choose from that i have found;

* Via the web-form http://cgi.clamav.net/sendvirus.cgi
* Via the web-form http://www.clamav.net/report/report-malware.html
* Via the command-line utility clamsubmit
* Via submission to virustotal (since they are supposedly sharing
samples with vendors, as stated in their about-page
https://www.virustotal.com/en/about/ under "Important notes and Remarks").

I guess what i am thinking is that it might be a duplication of effort
to submit samples both to Virustotal and to you via any of the methods
above, if VT will share the samples that are not detected by clamav with
you anyway. But that might not be the case at all of course, as the
statement previously mentioned is not really detailing about how that is
done.

Thank you!
/Magnus