Discussion:
[clamav-users] clamav malware reports Notify Me
(too old to reply)
C.D. Cochrane
2016-05-05 13:06:16 UTC
Permalink
Hi,
I have been submitting virus samples for several months now and I always check the "Notify Me" box on the submission page at clamav.net/reports/malware. I have not received any notification. So, I am wondering (1) if my samples are actually being received or (2) if "Notify Me" is not being utilized after post submission processing.
thanks,
Chris
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Al Varnell
2016-05-05 15:21:57 UTC
Permalink
You must join the clamav-virusdb list in order to be notified. Did you do that?
<http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-virusdb>

-Al-
Post by C.D. Cochrane
Hi,
I have been submitting virus samples for several months now and I always check the "Notify Me" box on the submission page at clamav.net/reports/malware. I have not received any notification. So, I am wondering (1) if my samples are actually being received or (2) if "Notify Me" is not being utilized after post submission processing.
thanks,
Chris
Joel Esler (jesler)
2016-05-05 16:21:31 UTC
Permalink
After many complaints, we aren’t publishing the names in the virusdb email anymore. We have a bug open with our team to check and see what the issue is with individual notification.
--
Joel Esler
Manager, Talos Group




On May 5, 2016, at 11:21 AM, Al Varnell <***@mac.com<mailto:***@mac.com>> wrote:

You must join the clamav-virusdb list in order to be notified. Did you do that?
<http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-virusdb>

-Al-

On Thu, May 05, 2016 at 06:06 AM, C.D. Cochrane wrote:

Hi,
I have been submitting virus samples for several months now and I always check the "Notify Me" box on the submission page at clamav.net/reports/malware<http://clamav.net/reports/malware>. I have not received any notification. So, I am wondering (1) if my samples are actually being received or (2) if "Notify Me" is not being utilized after post submission processing.
thanks,
Chris
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http:
C.D. Cochrane
2016-05-05 17:17:42 UTC
Permalink
I was on the clamav-virusdb mailing list at one time, but no longer. I recall getting daily email, regardless of whether I had submitted a sample that day or not, which means "Notify Me" has no effect. Also, that email contains absolutely no information to correlate with my virus submission that I could ever discern.

For example, yesterday...
*Doc.Dropper.Agent-1400834
*Doc.Dropper.Agent-1400835
*Doc.Dropper.Agent-1400836, etc.

This tells me nothing about whether my submission was received, whether it was a duplicate, whether it was even a virus, or whether they consider my submissions to be spam. If the clamav-virusdb mailing list is considered the result of "Notify Me" I would strongly suggest that the checkbox on the page be renamed "subscribe to virusdb mailing list", not "Notify Me". There are completely different expectations in the choice of wording.
...Chris
You must join the clamav-virusdb list in order to be notified. Did you do that?
<http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-virusdb>
-Al-
Hi,
I have been submitting virus samples for several months now and I always check the "Notify Me" box on the submission page at clamav.net/reports/malware. I have not received any notification. So, I am wondering (1) if my samples are actually being received or (2) if "Notify Me" is not being utilized after post submission processing.
thanks,
Chris
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
Joel Esler (jesler)
2016-05-05 18:09:53 UTC
Permalink
Understood, hence the second part of my statement in my email:

"We have a bug open with our team to check and see what the issue is with individual notification.”
--
Joel Esler
Manager, Talos Group




On May 5, 2016, at 1:17 PM, C.D. Cochrane <***@post.com<mailto:***@post.com>> wrote:

I was on the clamav-virusdb mailing list at one time, but no longer. I recall getting daily email, regardless of whether I had submitted a sample that day or not, which means "Notify Me" has no effect. Also, that email contains absolutely no information to correlate with my virus submission that I could ever discern.

For example, yesterday...
*Doc.Dropper.Agent-1400834
*Doc.Dropper.Agent-1400835
*Doc.Dropper.Agent-1400836, etc.

This tells me nothing about whether my submission was received, whether it was a duplicate, whether it was even a virus, or whether they consider my submissions to be spam. If the clamav-virusdb mailing list is considered the result of "Notify Me" I would strongly suggest that the checkbox on the page be renamed "subscribe to virusdb mailing list", not "Notify Me". There are completely different expectations in the choice of wording.
...Chris


You must join the clamav-virusdb list in order to be notified. Did you do that?
<http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-virusdb>
-Al-

On Thu, May 05, 2016 at 06:06 AM, C.D. Cochrane wrote:

Hi,
I have been submitting virus samples for several months now and I always check the "Notify Me" box on the submission page at clamav.net/reports/malware<http://clamav.net/reports/malware>. I have not received any notification. So, I am wondering (1) if my samples are actually being received or (2) if "Notify Me" is not being utilized after post submission processing.
thanks,
Chris

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/
C.D. Cochrane
2016-05-05 18:15:18 UTC
Permalink
Ah, okay. A bug could explain a lack of notifications.
Must one ALSO be subscribed to the clamav-virusdb mailing list in order to receive notifications?
thanks,
Chris 
Post by Joel Esler (jesler)
"We have a bug open with our team to check and see what the issue is with individual notification.”
--
Joel Esler
Manager, Talos Group
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-f
Joel Esler (jesler)
2016-05-05 18:16:40 UTC
Permalink
No, I wouldn’t think so. But that’s that our bug is hoping to find out.
--
Joel Esler
Manager, Talos Group




On May 5, 2016, at 2:15 PM, C.D. Cochrane <***@post.com<mailto:***@post.com>> wrote:

Ah, okay. A bug could explain a lack of notifications.
Must one ALSO be subscribed to the clamav-virusdb mailing list in order to receive notifications?
thanks,
Chris

Understood, hence the second part of my statement in my email:

"We have a bug open with our team to check and see what the issue is with individual notification.”
--
Joel Esler
Manager, Talos Group
_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

_______________________________________________
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http:/
Loading...