On Thu, 21 Aug 2008, Michael Grant wrote:
> Before automating something to post thousands of viruses to that web
> page, you might want to warn a real human first.

Begging pardon, but exactly how is it that this one person has 
hundreds (?) of viruses that have not been detected anywhere else?
If these viruses are spreading world-wide, then why aren't they entering
all the different virus databases by multiple paths? 

I would still question whether there has been misidentification of some
sort, or perhaps Aaron's ClamAV updates are not working properly? Did this
'flood' of undetected viruses just start recently? Remember there were
those issues with the change of library location in the past few months.
Freshclam could be studiously updating his 'wrong' database and reporting
success, but Clamd is using the original package main database with no
dailies?

Aron, I would suggest submitting a few viruses to the submission
mechanism, then wait for the next ClamAV update, and see if those viruses
are then detected. If not, you know what is happening. 

If those viruses *do* get detected, then I would question whether these
viruses are being specifically 'targeted' at Aron. Something is just not
right here. Either Aron is categorizing as 'virus' a type of 'bad' file
that is *not* (does ClamAV care about spyware?) or somehow he is getting
singled out for all these viruses. Otherwise, why aren't they all being
updated from all over the world?

Aron, can you offer a few examples of virus names/descriptions detected by
other software, so we can be certain that ClamAV "should" be detecting
them?

Hope this helps!

- Charles

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to