[clamav-users] Nonsensical noreplies from ClamAV team

Andrew C Aitchison clamav at aitchison.me.uk
Thu Nov 18 20:08:25 UTC 2021


On Thu, 18 Nov 2021, Alessandro Vesely via clamav-users wrote:

> Hi all,
>
> even though I filter incoming messages with ClamAV, last Monday I 
received a mail with two suspicious
> attachments.  They were PE32+ executable (DLL) (GUI) x86-64, for MS 
Windows.  I uploaded the samples to
> virustotal.com, who reported they were recognized as troyans.  I saved 
the viral message and uploaded it to
> https://www.clamav.net/reports/malware.  On Tuesday I received the 
following message:
>
> -------- Forwarded Message --------
> Subject:      ClamAV.net - Your malware submission
> Date:         Tue, 16 Nov 2021 07:23:26 +0000 (UTC)
> From:         noreply at clamav.com
> To:   vesely at tana.it
>
>
>
> Alessandro Vesely,
>
> Thank you again for your submission.
>
> Your File:
> purchase-ORD (SHA256: 
2ac2bb49a9135954a298cbb3e52b3ecfcb1e5e2dc6d83fac7052d4c3833ac11a)
>
>
> Our initial assessment shows that this file is possibly clean. If you 
provided a description that suggests
> otherwise, we will further examine the sample & proceed from there.
>
> -The ClamAV team
> -------- End Of Forwarded Message --------

> What's the purpose of such messages?

That is an automated message from the submission system.
My take is that it means that the robot failed to spot any issue,
but a human will read your message anyway and decide whether to
investigate further.

-- 
Andrew C. Aitchison					Kendal, UK
 			andrew at aitchison.me.uk


More information about the clamav-users mailing list