[clamav-users] Macro virus missed...

2018-08-30 Thread Alex
Hi, I submitted a false-negative about six hours ago and it hasn't yet been detected and still seeing them being received. I don't want to post it here to further enable the scammers, but this is the virustotal entry: https://www.virustotal.com/#/file/ef65f07bf10746665d308e147a6a86329c169e1ac86e7e

Re: [clamav-users] Macro virus missed...

2018-08-30 Thread Al Varnell
I can only tell you from previous postings that the signature team is small and receives thousands of samples from a variety of sources daily, and even though some are processed by automation, all signatures still have to go through a QA process before release and database updates are normally s

Re: [clamav-users] Macro virus missed...

2018-08-31 Thread Groach
The one thing that we do know is that you shouldnt have expectations of ClamAV to be effective for Zero Hour, or even Zero Day (or some could argue more) effective and you really shouldnt expect such immediate response or effectiveness. (They will have their reasons - team size, techology, reli