[clamav-users] Submitting False Negatives

[Christopher Marczewski]

Hi Tim,

For the time being, I would compress the samples and submit the resulting
archive file. Be sure to mention this in the Description field of the form.
You can also send the file name to me, and I'll make sure the samples get
processed.

On Wed, Jan 11, 2017 at 12:07 PM, Tim Tepatti <ttepatti at gmail.com> wrote:

> Hello,
>
> I recently started using ClamAV and have a small database of virus samples
> on my computer. I noticed that when scanning some of these samples ClamAV
> will report that the file is OK even though its a known virus.
>
> I originally tried using the clamsubmit utility included in clamav but it
> doesn't appear to work anymore, just giving a 404 page not found error. I
> then went through the ClamAV website to submit the false negatives, but
> noticed you can only submit one file at a time and I have 10+ to submit. Is
> there any way I could bulk-submit false negatives, at least if they're from
> the same virus family?
>
> Thanks,
>
> - Tim
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>



-- 
Christopher Marczewski
Research Engineer
Talos Group
cmarczewski at sourcefire.com
Phone: 443.430.7118