Re: [Clamav-users] Malware submission / Virustotal

2008-10-26 Thread Robert Schetterer
Karsten Bräckelmann schrieb: > On Sun, 2008-10-26 at 10:22 +0100, Robert Schetterer wrote: >> Karsten Bräckelmann schrieb: >>> Recent flood of (German only?) Trojan.Agent malware, partly slipping by >>> ClamAV. So I now am submitting samples where I spot 'em... >>> >>> By doing so, two questions ca

Re: [Clamav-users] Malware submission / Virustotal

2008-10-26 Thread Karsten Bräckelmann
On Sun, 2008-10-26 at 10:22 +0100, Robert Schetterer wrote: > Karsten Bräckelmann schrieb: > > Recent flood of (German only?) Trojan.Agent malware, partly slipping by > > ClamAV. So I now am submitting samples where I spot 'em... > > > > By doing so, two questions came up: [ Yet unanswered sample

Re: [Clamav-users] Freshclam executes the OnUpdateExecute command twice per update

2008-10-26 Thread Jesper Dybdal
On Sun, 26 Oct 2008 10:18:22 + (GMT), "Richard.Hall" <[EMAIL PROTECTED]> wrote: >I've come to the conclusion that it's a bug, introduced into >freshclam/execute.c in version 0.94 ... >Or to put it another way, I've >decided to live with the double emails until the next release comes >along!

Re: [Clamav-users] Freshclam executes the OnUpdateExecute command twice per update

2008-10-26 Thread Richard.Hall
Jesper, I've just been investigating the exact same problem! On Sun, 26 Oct 2008, Jesper Dybdal wrote: > I have just installed clamav for use with amavisd-new. It works fine > and the database is updated as it should, but each time frechclam > updates the virus database it executes the OnUpdate

Re: [Clamav-users] Malware submission / Virustotal

2008-10-26 Thread Robert Schetterer
Karsten Bräckelmann schrieb: > Recent flood of (German only?) Trojan.Agent malware, partly slipping by > ClamAV. So I now am submitting samples where I spot 'em... > > By doing so, two questions came up: > > (a) After testing the sample message with Virustotal, should I even > bother submitti