Re: [clamav-users] Clamscan infection that is not infected

[Joel Esler (jesler)]

Oh, sorry, didn’t see that Alain wrote this.  Apologies.


> On Apr 15, 2015, at 9:52 AM, Alain Zidouemba  
> wrote:
> 
> Can you provide a checksum for your sample?
> 
> Thanks,
> 
> - Alain
> 
> On Wed, Apr 15, 2015 at 9:50 AM, sanes  wrote:
> 
>> Why does clamscan show this file infection, but a scan with VirusTotal.com
>> shows file is safe?  Which source should I trust?
>> 
>> c:\Windows\System32\mobsync.exe: Win.Trojan.Agent-863936 FOUND
>> 
>> 
>> ___
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
>> 
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Clamscan infection that is not infected

[Joel Esler (jesler)]

On Apr 15, 2015, at 9:50 AM, sanes mailto:z...@wrzanes.com>> 
wrote:

Why does clamscan show this file infection, but a scan with 
VirusTotal.com
shows file is safe?  Which source should I trust?

c:\Windows\System32\mobsync.exe: Win.Trojan.Agent-863936 FOUND



If you believe you have a false positive, please submit it here:

http://www.clamav.net/report/report-fp.html

--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos Group
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Clamscan infection that is not infected

[Alain Zidouemba]

Can you provide a checksum for your sample?

Thanks,

- Alain

On Wed, Apr 15, 2015 at 9:50 AM, sanes  wrote:

> Why does clamscan show this file infection, but a scan with VirusTotal.com
> shows file is safe?  Which source should I trust?
>
> c:\Windows\System32\mobsync.exe: Win.Trojan.Agent-863936 FOUND
>
>
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] Clamscan infection that is not infected

[sanes]

Why does clamscan show this file infection, but a scan with VirusTotal.com
shows file is safe?  Which source should I trust?

c:\Windows\System32\mobsync.exe: Win.Trojan.Agent-863936 FOUND


___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml