Re: [clamav-users] Fwd: Unable to detect pdf virus (Not working in sharepoint)

2015-09-04 Thread P K
Thanks steven. I uploaded both file. I feel clamav should detect signature with any files irrespective of form data by browser. On Sat, Aug 22, 2015 at 12:13 AM, Steven Morgan wrote: > I've opened https://bugzilla.clamav.net/show_bug.cgi?id=11380. Please > attach to this bugzilla ticket the ori

Re: [clamav-users] Fwd: Unable to detect pdf virus (Not working in sharepoint)

2015-08-21 Thread Steven Morgan
I've opened https://bugzilla.clamav.net/show_bug.cgi?id=11380. Please attach to this bugzilla ticket the original pdf file and the original multipart document. Thanks. On Tue, Aug 18, 2015 at 10:48 AM, P K wrote: > Hi Guys, > > Again troubling you. Can you please let me know why its not working

Re: [clamav-users] Fwd: Unable to detect pdf virus (Not working in sharepoint)

2015-08-20 Thread P K
Hi Guys, Again troubling you. Can you please let me know why its not working for windows server. Do i need to enable any setting in ClamAv configuration? I was trying same exploit.pdf virus file to upload in Windows server and its not detected by ClamAv Antivirus. *I tried with detect-pua also a

Re: [clamav-users] Fwd: Unable to detect pdf virus

2015-08-18 Thread P K
Hi Guys, Again troubling you. Can you please let me know why same virus is not detected for windows server. Do i need to enable any setting in ClamAv configuration? md5sum exploit.pdf a3e8a7602797c69f6320225e8137d063 exploit.pdf I was trying same exploit.pdf virus file (CVE-2009-4324) to uploa

Re: [clamav-users] Fwd: Unable to detect pdf virus

2015-07-30 Thread P K
thanks Shaun. I seen its pushed in latest update. Hope to learn more from you guys. On Wed, Jul 29, 2015 at 7:32 PM, Shaun Hurley wrote: > PK, > > Thank you for bringing this to our attention. > > I have created another signature that doesn't rely upon PUA being enabled. > As soon as the signat

Re: [clamav-users] Fwd: Unable to detect pdf virus

2015-07-29 Thread Shaun Hurley
PK, Thank you for bringing this to our attention. I have created another signature that doesn't rely upon PUA being enabled. As soon as the signature is done being tested for false positives we will publish it. Thanks again, Shaun Hurley ClamAV Malware Team On Tue, Jul 28, 2015 at 10:54 AM, P K

Re: [clamav-users] Fwd: Unable to detect pdf virus

2015-07-28 Thread P K
worked properly after enabling PUA. Cheers, --PK On Tue, Jul 28, 2015 at 8:14 PM, Steve Basford < steveb_cla...@sanesecurity.com> wrote: > > On Tue, July 28, 2015 3:41 pm, P K wrote: > > So how to detect same in my clamAv? > > > > Until a proper sig is added, you could try > > clamscan --detect

Re: [clamav-users] Fwd: Unable to detect pdf virus

2015-07-28 Thread P K
So how to detect same in my clamAv? On Tue, Jul 28, 2015 at 8:08 PM, Steve Basford < steveb_cla...@sanesecurity.com> wrote: > > On Tue, July 28, 2015 3:27 pm, P K wrote: > > a3e8a7602797c69f6320225e8137d063 exploit.pdf > > > > ClamAV isn't showing detection here: > > > https://www.virustotal.com

Re: [clamav-users] Fwd: Unable to detect pdf virus

2015-07-28 Thread Steve Basford
On Tue, July 28, 2015 3:41 pm, P K wrote: > So how to detect same in my clamAv? > Until a proper sig is added, you could try clamscan --detect-pua=yes Cheers, Steve Web : sanesecurity.com Blog: sanesecurity.blogspot.com ___ Help us build a comprehe

Re: [clamav-users] Fwd: Unable to detect pdf virus

2015-07-28 Thread Steve Basford
On Tue, July 28, 2015 3:27 pm, P K wrote: > a3e8a7602797c69f6320225e8137d063 exploit.pdf > ClamAV isn't showing detection here: https://www.virustotal.com/en/file/61c9333604404addf7e3aaf97f89d4ed3bf6fe4d12bd3e98bc7232ebfd9f0c5b/analysis/ But does detect using PUA: ClamAV: Possibly Unwanted Ap

Re: [clamav-users] Fwd: Unable to detect pdf virus

2015-07-28 Thread P K
a3e8a7602797c69f6320225e8137d063 exploit.pdf On Tue, Jul 28, 2015 at 5:14 PM, Joel Esler (jesler) wrote: > Can you provide us with the hash for the file? > > -- > Joel Esler > Manager, Threat Intelligence and Open Source > Talos Group > Sent from my iPhone > > On Jul 28, 2015, at 7:43 AM, P K

Re: [clamav-users] Fwd: Unable to detect pdf virus

2015-07-28 Thread Joel Esler (jesler)
Can you provide us with the hash for the file? -- Joel Esler Manager, Threat Intelligence and Open Source Talos Group Sent from my iPhone On Jul 28, 2015, at 7:43 AM, P K mailto:pkopen...@gmail.com>> wrote: Sure. I uploaded same. I wanted someone else to try to make sure its issue with clamav.

[clamav-users] Fwd: Unable to detect pdf virus

2015-07-28 Thread P K
Sure. I uploaded same. I wanted someone else to try to make sure its issue with clamav. Can you point me any other real virus(except eicar) to try to make sure my clamAv working properly. I want to try clamav by sending real virus file. Thanks --Pk -- Forwarded message -- From: A