Web blog d'un ingénieur en sécurité informatique. IT Security watcher's blog: news, threats analysis, AV issues, PoC, IT security, bugs... Contact: philippe.vialle@wanadoo.fr
After my previous article (in French) regarding a ZBot variant analysis on VirusTotal, which gave no result for ClamAV while Clam does detect the sample, somebody from Google VirusTotal left comments on my Twitter account:
As you can see, there seems to be a confusion here between PUA (Potentially Unwanted Application) and malware (Win.Trojan.Spy.Zbot)...
To me, Clam's results should definitely be displayed in the "main report" as it is not PUA, since ZBot is not (not at all, I can tell :) ).
HTH.
/idata%2F2094304%2Fdossier1%2FWP_20140310_026.jpg)
/idata%2F2094304%2Fdossier1%2Fivanlef0u.tuxfamily.org_100114.JPG)
/idata%2F2094304%2Fdossier1%2FFaux_FlashP_texte_170713.PNG)
/idata%2F2094304%2Fdossier1%2Fsquidclamav_alerte_130513-copie-1.png)