Just a quick reminder that the foxholedb is unofficial and not something that 
should normally be discussed in this e-mail list.  Steve is kind enough to 
intercept these request, but they really should be brought to his attention 
directly <http://sanesecurity.com/contact-us/>.

That being said, I don’t really understand why you shouldn’t be able to find 
known .exe malware in a .zip archive without any unofficial database 
assistance.  I support OS X and see them detected by Mac users all the time.

-Al-

On Tue, Oct 13, 2015 at 11:23 PM, Hartmann, Jan wrote:
> 
> Hi,
> Today we had a lot problems with exe files hidden in zip archives
> 
> I tried to add the foxholedb to our clamav, but sadly it didn’t recognize the 
> exe in the zip.
> 
> 
> clamscan --database=/var/lib/clamav/foxhole_generic.cdb fatuousness\ paging\ 
> policy\ work\ regulations.zip
> fatuousness paging policy work regulations.zip: OK
> 
> 
> Mit freundlichen Grüßen / Best Regards
> 
> 
> i. A. Jan Hartmann

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to