Re: ClamAV Antivirus can't detect trojan horses?

Turritopsis Dohrnii Teo En Ming via clamav-users <[email protected]> Tue, 23 Dec 2025 15:40:37 +0000
Newsgroups gmane.comp.security.virus.clamav.user
Message-ID <fG5vEiKvEQMDK09eedbD54_wkQPv9Y2mTwkw6swc1E23ZaTQhk3DiJnszXjnjstZBV8Z3huHeS0tbwvUQKa76fTMtqqdmM8u3zq_De4duwk=@protonmail.com>
--===============0638269493287756058==
Content-Type: multipart/alternative;
 boundary="b1=_0hiMymuaeoydskKuJAVlUXO6g0j5SW6PB8CcIswLFw"

--b1=_0hiMymuaeoydskKuJAVlUXO6g0j5SW6PB8CcIswLFw
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64
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--b1=_0hiMymuaeoydskKuJAVlUXO6g0j5SW6PB8CcIswLFw
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64
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==


--b1=_0hiMymuaeoydskKuJAVlUXO6g0j5SW6PB8CcIswLFw--


--===============0638269493287756058==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

--===============0638269493287756058==--