Re: [clamav-users] W32/Autorun.worm.aaeh not found in ClamAV ?

2013-04-08 Thread Steve Basford 

> Al,
>
> Just now I restored and submitted autorun.inf as well to "submit
> malware" in clamav.net
>  From sigtool I got this MD5 signature;
> 3b19da4562e3729854ae6b3fe127:1123:Autorun.inf

It's also worth submitting the malware to:

https://www.virustotal.com/en/

Currently the Autorun hash you have isn't in it's database.

Cheers,

Steve
Sanesecurity

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [clamav-users] W32/Autorun.worm.aaeh not found in ClamAV ?

2013-04-08 Thread Zvi Kave 

Al,

Just now I restored and submitted autorun.inf as well to "submit 
malware" in clamav.net

From sigtool I got this MD5 signature;
3b19da4562e3729854ae6b3fe127:1123:Autorun.inf

Regards,

Zvi

On 08/04/13 11:51, A K Varnell wrote:

I'm sure it would help the team if you could provide the file name and MD5 hash 
of what you submitted.


-Al-


___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [clamav-users] W32/Autorun.worm.aaeh not found in ClamAV ?

2013-04-08 Thread Zvi Kave 

Sorry.

I see now from McAfee link  that it is low risk - 
http://www.mcafee.com/threat-intelligence/malware/default.aspx?id=1607456


The file is autorun.inf and it creates few other programs like: 
Secret.exe , Sexy.exe , Porn.exe


I sent the file Sexy.exe  just now under "Submit malware" in clamav.net 
menu. (autorun.inf disappeared - perhaps by my ESET)

I hope it can help you.

Regards,

Zvi

On 08/04/13 11:51, A K Varnell wrote:

I'm sure it would help the team if you could provide the file name and MD5 hash 
of what you submitted.


-Al-


___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [clamav-users] W32/Autorun.worm.aaeh not found in ClamAV ?

2013-04-08 Thread A K Varnell 
I'm sure it would help the team if you could provide the file name and MD5 hash 
of what you submitted.


-Al-
-- 
Al Varnell
Mountain View, CA

On Apr 8, 2013, at 1:45 AM, Zvi Kave  wrote:

> 
> Hi,
> 
> I can not understand why  the dangerous virus called W32/Autorun.worm.aaeh by 
> McAfee
> can not be detected by ClamAV.
> http://www.mcafee.com/threat-intelligence/malware/default.aspx?id=1607456
> 
> I tried to scan it also from free Immunet 3.0 but without detection.
> I submitted this virus to ClamAV a month ago!
> Am I doing something wrong?
> 
> Regards,
> 
> Zvi
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[clamav-users] W32/Autorun.worm.aaeh not found in ClamAV ?

2013-04-08 Thread Zvi Kave 


Hi,

I can not understand why  the dangerous virus called 
W32/Autorun.worm.aaeh by McAfee

can not be detected by ClamAV.
http://www.mcafee.com/threat-intelligence/malware/default.aspx?id=1607456

I tried to scan it also from free Immunet 3.0 but without detection.
I submitted this virus to ClamAV a month ago!
Am I doing something wrong?

Regards,

Zvi

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml