Re: [clamav-users] W32/Autorun.worm.aaeh not found in ClamAV ?
I'm sure it would help the team if you could provide the file name and MD5 hash of what you submitted. -Al- -- Al Varnell Mountain View, CA On Apr 8, 2013, at 1:45 AM, Zvi Kave zvi.k...@razlee.com wrote: Hi, I can not understand why the dangerous virus called W32/Autorun.worm.aaeh by McAfee can not be detected by ClamAV. http://www.mcafee.com/threat-intelligence/malware/default.aspx?id=1607456 I tried to scan it also from free Immunet 3.0 but without detection. I submitted this virus to ClamAV a month ago! Am I doing something wrong? Regards, Zvi ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] W32/Autorun.worm.aaeh not found in ClamAV ?
Sorry. I see now from McAfee link that it is low risk - http://www.mcafee.com/threat-intelligence/malware/default.aspx?id=1607456 The file is autorun.inf and it creates few other programs like: Secret.exe , Sexy.exe , Porn.exe I sent the file Sexy.exe just now under Submit malware in clamav.net menu. (autorun.inf disappeared - perhaps by my ESET) I hope it can help you. Regards, Zvi On 08/04/13 11:51, A K Varnell wrote: I'm sure it would help the team if you could provide the file name and MD5 hash of what you submitted. -Al- ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] W32/Autorun.worm.aaeh not found in ClamAV ?
Al, Just now I restored and submitted autorun.inf as well to submit malware in clamav.net From sigtool I got this MD5 signature; 3b19da4562e3729854ae6b3fe127:1123:Autorun.inf Regards, Zvi On 08/04/13 11:51, A K Varnell wrote: I'm sure it would help the team if you could provide the file name and MD5 hash of what you submitted. -Al- ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] W32/Autorun.worm.aaeh not found in ClamAV ?
Al, Just now I restored and submitted autorun.inf as well to submit malware in clamav.net From sigtool I got this MD5 signature; 3b19da4562e3729854ae6b3fe127:1123:Autorun.inf It's also worth submitting the malware to: https://www.virustotal.com/en/ Currently the Autorun hash you have isn't in it's database. Cheers, Steve Sanesecurity ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
