[clamav-users] Virus behaviour ?

[Al Varnell]

ClamAV does not document malware behavior and many of the signatures are automated in response to samples provided by others, so even the signature team won't have that kind of information.

Your best bet would be to upload each of those files to <https://www.virustotal.com <https://www.virustotal.com/>> and see if any other scanners that detected them as infected have documentation to share on their behavior.

-Al-
Al Varnell
ClamXAV User

On Sun, Mar 25, 2018 at 01:57 AM, malko wrote:
> Hi all,
> 
> I just discovered ClamAV and give it a try.
> 
> While scanning an usb-stick, some 'virus' were reported and I came here to find the behaviour of these 'virus' in order to judge by myself their dangerousness. They are the "win.trojan.huerta-1", "win.trojan.agent-<number>" & "txt.downloader.generic-<number>".
> 
> Maybe it's only because I am not used to the site interface but did not find an easy way to search old post nor did I found a virus database listing & describing the viruses by name.
> 
> Could someone please give me some clue.
> 
> Thanks
> m.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3860 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20180325/795553b1/attachment.bin>