It seems evident to me that the reason is that Microsoft doesn’t share it’s 
samples with other A-V signature writers.  Somebody needs to provide the sample 
to ClamAV, Sophos, VirusTotal, etc. and it might as well be you now that you 
know where to upload it to.

-Al-

On Mon, Oct 19, 2015 at 04:28 PM, Alex wrote:
> 
> Hi,
> I have a jar file that is apparently identified as a virus by
> Microsoft as "Trojan.Java.Adwind.af" but not a virus by either clamav
> or sophos. Microsoft apparently first identified this early this year,
> so I'm curious why it's not being tagged by clamav or sophos.
> 
> I know I can upload a sample, but I'm more interested in knowing if
> Microsoft is identifying this as an FP, or otherwise why clamav and
> sophos aren't identifying it.
> 
> Where can I upload a binary file and hopefully ask that someone
> investigate it for me?
> 
> Thanks so much,
> Alex

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Reply via email to