On Fri, 25 Feb 2005 at 9:15:50 +0100, Magnus Morén wrote: > I tried to submit a virus file at the web page but I get the message > below. > > I have two different ClamAV installations (Solaris 9 and Fedora C 3) > both with the latest engine+database, but none of those is detecting the > virus: > > # clamscan -V > ClamAV 0.83/724/Fri Feb 25 00:55:18 2005 > > # clamscan body.cmd > body.cmd: OK > > 4 of 16 of the scanners at http://www.virustotal.com/flash/index_en.html > detects it. > > What gives? > > --- Message from virus submit web page --- > Result: > > This virus is already recognized by ClamAV 0.83/724/Fri Feb 25 00:55:18 > 2005 as Broken.Executable . Be careful when submitting samples and > remember to run freshclam! >
I believe your clamscan will detect it when you use option "--detect-broken". -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
