[clamav-users] Macro virus missed...

[Al Varnell]

I can only tell you from previous postings that the signature team is small and receives thousands of samples from a variety of sources daily, and even though some are processed by automation, all signatures still have to go through a QA process before release and database updates are normally six hours apart. Expecting a response in six hours is totally unrealistic. Perhaps someone from the team can give you a better estimate, but my guess would be at least twenty-four hours will pass before you see your submission being addressed.

Sent from my iPad

-Al-
ClamXAV User

> On Aug 30, 2018, at 19:34, Alex <mysqlstudent at gmail.com> wrote:
> 
> Hi,
> I submitted a false-negative about six hours ago and it hasn't yet
> been detected and still seeing them being received. I don't want to
> post it here to further enable the scammers, but this is the
> virustotal entry:
> 
> https://www.virustotal.com/#/file/ef65f07bf10746665d308e147a6a86329c169e1ac86e7e414ae5a809210775c1/detection
> 
> A dozen other antivirus vendors are blocking them now - why not
> clamav? How does the process of adding new signatures work? Is there a
> staff of people working on this or something less?
> 
> I realize it's free, and I'm not complaining - just want to know what
> I should expect. We've also contributed to Steve's effort at Sane, but
> should we be relying on him?
> 
> Thanks,
> Alex
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml