Re: [clamav-users] Virus definition question

2018-03-06 Thread Al Varnell
I have no what the verification process might be, if it even exists. According to VirusTotal's Relationships Information on this file, "While monitoring an end-user machine in-the-wild, CarbonBlack noticed the following files in execution wrote this sample to disk." so my guess would be that

[clamav-users] Virus definition question

2018-03-06 Thread Lindon Ng
Hello, I would like to ask on how the virus definitions are actually verified? As a malware that I am looking at seems to be only detectable by ClamAV and not other anti viruses on virustotal. Is this likely to be a false positive or is it possible to ask why this malware is being flagged out