[clamav-users] question about a malware submission

[vze1amckv at verizon.net]

Hello.

I submitted it over a week ago, and got a response saying that "Our 
initial assessment has verified the sample as a threat & we will be 
publishing signatures for ClamAV," but neither the ClamAV scanner in 
Jotti nor the one in Virus Total detects it.

You can verify for yourself; the SHA-1 hash is: 
d2058d5fdd9c4551f7c888d6673a6dbc780b095d.  Shall I resubmit?

Thanks,
Jonathan

On 6/23/21 7:24 AM, Joel Esler (jesler) wrote:
> 
> You should submit the suspected malware here:
> 
> https://www.clamav.net/reports/malware 
> <https://www.clamav.net/reports/malware>
> 
> —
> Sent from my  iPhone
> 
>> On Jun 22, 2021, at 22:01, vze1amckv--- via clamav-users 
>> <clamav-users at lists.clamav.net> wrote:
>>
>> Hello,
>>
>> I recently submitted a suspicious file via the ClamAV website 
>> submission form, and got a response back saying that "Our initial 
>> assessment has verified the sample as a threat & we will be publishing 
>> signatures for ClamAV."  But when I re-submit the file to 
>> virusscan.jotti.org or VirusTotal it still does not show that ClamAV 
>> detects the file.
>>
>> Is there a way to check the status of a particular submission? (I can 
>> e-mail the hash privately.)  Or, how long is the usual turnaround time 
>> between when a submission is accepted and when a signature is made for it?
>>
>> Thank you.