Hi, Occasionally I submit attachments in my Spam folder to ClamAV via the ClamAV.net "submit malware" form.
A frequent type of spam message I get are written in Chinese, with Excel or Powerpoint files attached, with hexadecimal codes in the file name separated by "x". I scan with VirusTotal first and in most cases there is no malware. Then I submit the malware to ClamAV. The CRDF people told me once that their third-party ClamAV signatures makes use of real-time VirusTotal scans. Is the same true of ClamAV's official signatures? I frequently get these messages and I'd imagine it could be a real time-waster to the ClamAV team who have to frequently deal with false positives and other proven malware, rather than the potential malware I submit. Thank you, -- -Dan Q
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
