Ben Lambrey wrote:
> We received several samples of Trojan.Conka.A (name by BitDefender) 
> Trojan.MGK 
> (name by FRISK) at our viruswall last week.
> I've submitted a sample of the captured virus twice to Clamav, but is still 
> undetected by Clamav. I wonder why?
>   
Hi Ben,

While you wait for the signature to be produced from the ClamAV sig
team... why not see if you can create you own
md5 hash signature from your samples?

Something like this (read the docs for more info:
http://www.clamav.net/doc/)

sigtool --md5 trojan.exe > trojan.hdb

Place the trojan.hdb file with ClamAV's other databases..

Not quite the answer you wanted... but there you go ;)

Cheers,

Steve
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to