Karl, I also submitted Win32/Mabezat.A virus long time ago but it is not detected yet. So I added it by sigtool. They have sigtool to create a signature by yourself. By default you have to put it in /usr/local/share/clamav/ (or in your signature directory if you changed the default) To create it, better to change file name to virus name, because sigtool uses it to name the virus. I hope that it will work for your virus as well. Here are the steps:
cp 090209674.MSG Win32.Trojan.Zbot-3045 sigtool --md5 Win32.Trojan.Zbot-3045 > /usr/local/share/clamav/Win32.Trojan.Zbot-3045.hdb Now try to scan: clamscan 090209674.MSG Regards, Zvi ----- Original Message ----- From: "Karlheinz Schmidthaus" <ksng1...@ksit.de> To: <clamav-users@lists.clamav.net> Sent: Monday, February 23, 2009 11:38 PM Subject: [Clamav-users] problems with virus submission >I received the following answer after submission, but the trojan is not >detected: > > The notice is: > Result: > > Submission completed! > 090209674.MSG has been successfully sent to the virusdb maintainer team... > > > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml > > __________ Information from ESET NOD32 Antivirus, version of virus > signature database 3881 (20090223) __________ > > The message was checked by ESET NOD32 Antivirus. > > http://www.eset.com > > > _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
