If you have a sample of the file, submitting it through ClamAV's submission interface makes it "bubble up" so the rule writers can get to it faster.
(instead of waiting for it to come through Virustotal) J On Jun 29, 2011, at 5:24 AM, polloxx wrote: > Dear, > > One of our customers got a virus not detected by > Clamav:dhl-express-prtcopy-Delivery-Failure-Notification-HXZsVlN[...].exe > A fake DHL non-delivery report. > > Other engines do detect it: > BitDefender 7.2 2011.06.27 Trojan.Zbot.1911 > F-Secure 9.0.16440.0 2011.06.27 Trojan.Zbot.1911 > Kaspersky 9.0.0.837 2011.06.27 Trojan-Spy.Win32.Zbot.bpsx > > Sent it to Totalvirus 2 days ago. > > Are there other user with the same problem? Any solution? > > Thx, > P. > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml