On Tue, 2004-08-03 at 12:55, Bad Apple wrote: > I just got virus which was not detected by Clam but > got detected by F-prot Command line scanner . > > > I submitted the sample to the link mentioned above it > said > "Clamav DID NOT identify your sample as malicious > content" > > And after reporting the same file to > http://clamav.sourceforge.net/cgi-bin/sendvirus.cgi > It displayed > This virus is already recognized by clamscan / ClamAV > version devel-20040726 as Worm.Mabutu.A-unp . Be > careful when submitting samples and remember to run > freshclam! >
Ok, clamav-devel-20040726 contains a UPX unpacker, which isn't in 0.75.1 So, clamav-devel-20040726 is able to unpack the file and then recognises it as Worm.Mabutu.A-unp The file you have is obviously not matching the signature for the packed version. Please put the file in a password protected zip and upload it to the submissions page, and please add a note explaining the above. Thanks -trog
signature.asc
Description: This is a digitally signed message part
