[clamav-users] Nonsensical noreplies from ClamAV team
Andrew C Aitchison
clamav at aitchison.me.uk
Thu Nov 18 20:08:25 UTC 2021
On Thu, 18 Nov 2021, Alessandro Vesely via clamav-users wrote:
> Hi all,
>
> even though I filter incoming messages with ClamAV, last Monday I
received a mail with two suspicious
> attachments. They were PE32+ executable (DLL) (GUI) x86-64, for MS
Windows. I uploaded the samples to
> virustotal.com, who reported they were recognized as troyans. I saved
the viral message and uploaded it to
> https://www.clamav.net/reports/malware. On Tuesday I received the
following message:
>
> -------- Forwarded Message --------
> Subject: ClamAV.net - Your malware submission
> Date: Tue, 16 Nov 2021 07:23:26 +0000 (UTC)
> From: noreply at clamav.com
> To: vesely at tana.it
>
>
>
> Alessandro Vesely,
>
> Thank you again for your submission.
>
> Your File:
> purchase-ORD (SHA256:
2ac2bb49a9135954a298cbb3e52b3ecfcb1e5e2dc6d83fac7052d4c3833ac11a)
>
>
> Our initial assessment shows that this file is possibly clean. If you
provided a description that suggests
> otherwise, we will further examine the sample & proceed from there.
>
> -The ClamAV team
> -------- End Of Forwarded Message --------
> What's the purpose of such messages?
That is an automated message from the submission system.
My take is that it means that the robot failed to spot any issue,
but a human will read your message anyway and decide whether to
investigate further.
--
Andrew C. Aitchison Kendal, UK
andrew at aitchison.me.uk
More information about the clamav-users
mailing list