Re: ClamAV Antivirus can't detect trojan horses?

Newcomer01 via clamav-users <[email protected]> Tue, 23 Dec 2025 16:06:13 +0000
Newsgroups gmane.comp.security.virus.clamav.user
Message-ID <[email protected]>
This is a multi-part message in MIME format.
--===============0609623012474584121==
Content-Type: multipart/alternative;
 boundary="------------pPl560yCM9BJQHuQ9eejcwX6"
Content-Language: en-US, de-DE

This is a multi-part message in MIME format.
--------------pPl560yCM9BJQHuQ9eejcwX6
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

Yes, open the link and see the really old dates of this project, since 7.2.5 of March '21 no newer version was delivered and in the master tree (files for this project) the last changes was before 4-6 years: https://github.com/extremeshok/clamav-unofficial-sigs
I'm personally not sure if this project is in active developing anymore ...

On other hand, fangfrisch is much more up to date, last version 1.9.2 of April '25 and in the master tree the last changes was before 6-11 months: https://github.com/rseichter/fangfrisch and the developer promote always here his new version and what is changed or maybe what technical problems he have / had

Von / From: 	Turritopsis Dohrnii Teo En Ming <mailto:[email protected]>
An / To: 	Newcomer01 <mailto:[email protected]>
CC / CC: 	Clamav-Users, Ceo <mailto:[email protected], [email protected]>
Gesendet / Sent: 	Dienstag, Dezember 23, 2025 um 16:40 (at 04:40 PM) +0100
Betreff / Subject: 	Re: [clamav-users] ClamAV Antivirus can't detect trojan horses?

> Hi,
>
> You mean clamav-unofficial-sigs is not being actively maintained any more?
>
> Regards,
>
> Mr. Turritopsis Dohrnii Teo En Ming
> Extremely Democratic People's Republic of Singapore
> 23 Dec 2025 Tuesday 11.39 pm Singapore Time
>
> On Monday, December 22nd, 2025 at 12:59 PM, Newcomer01 via clamav-users <[email protected]> wrote:
>> mmmhhh a project with round 5 years old stuff - really trustful and really up to date.
>> Is this a living project or is it discontinued without any notice?
>> Sorry not my way, will stay on clamav only.
>>
>> Oh and you can also use fangfisch, this is maintained and up to date
>>
>> Von / From: 	Kenneth Porter Via Clamav-Users <mailto:[email protected]>
>> An / To: 	Newcomer01 <mailto:[email protected]>
>> CC / CC: 	Kenneth Porter <mailto:[email protected]>
>> Gesendet / Sent: 	Sonntag, Dezember 21, 2025 um 20:11 (at 08:11 PM) +0100
>> Betreff / Subject: 	Re: [clamav-users] ClamAV Antivirus can't detect trojan horses?
>>
>>> The included signatures are fair but not great. But, unlike a commercial
>>> AV product, you're not limited to what's included in the box. There are
>>> many sources of 3rd party signatures that can easily be added.
>>>
>>> My detection rate improved a lot when I installed this set:
>>>
>>> https://github.com/extremeshok/clamav-unofficial-sigs
>>>
>>> This is an aggregation of signature sets from multiple sources.
>>>
>>>
>>> _______________________________________________
>>>
>>> Manage your clamav-users mailing list subscription / unsubscribe:
>>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>>
>>>
>>> Help us build a comprehensive ClamAV guide:
>>> https://github.com/Cisco-Talos/clamav-documentation
>>>
>>> https://docs.clamav.net/#mailing-lists-and-chat
>>
>

--------------pPl560yCM9BJQHuQ9eejcwX6
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body text="#000000" bgcolor="#ffffff" smarttemplateinserted="true">
    <div id="smartTemplate4-template">Yes, open the link and see the
      really old dates of this project, since 7.2.5 of March '21 no
      newer version was delivered and in the master tree (files for this
      project) the last changes was before 4-6 years:
      <a class="moz-txt-link-freetext" href="https://github.com/extremeshok/clamav-unofficial-sigs">https://github.com/extremeshok/clamav-unofficial-sigs</a><br>
      I'm personally not sure if this project is in active developing
      anymore ...<br>
      <br>
      On other hand, fangfrisch is much more up to date, last version
      1.9.2 of April '25 and in the master tree the last changes was
      before 6-11 months: <a class="moz-txt-link-freetext" href="https://github.com/rseichter/fangfrisch">https://github.com/rseichter/fangfrisch</a> and
      the developer promote always here his new version and what is
      changed or maybe what technical problems he have / had</div>
    <div id="smartTemplate4-quoteHeader"><br>
      <table
style="border-collapse: collapse; width: 100%; border-top: 2px solid #808080; font-family: Verdana, Arial, sans-serif; color: #000000; font-size: 13px; background-color: #eeeeee;">
        <tbody>
          <tr style="vertical-align: top;">
            <td style="width: 120px; vertical-align: middle;"><span
                style="color: #cc0000;">Von / From:</span></td>
            <td style="vertical-align: middle;"><a
                style="text-decoration: none;"
                href="mailto:[email protected]">Turritopsis
                Dohrnii Teo En Ming</a></td>
          </tr>
          <tr style="vertical-align: top;">
            <td style="width: 120px; vertical-align: middle;"><span
                style="color:#cc0000;">An / To:</span></td>
            <td style="vertical-align: middle;"><a
                style="text-decoration: none;"
                href="mailto:[email protected]">Newcomer01</a></td>
          </tr>
          <tr style="vertical-align: top;">
            <td style="width: 120px; vertical-align: middle;"><span
                style="color: #cc0000;">CC / CC:</span></td>
            <td style="vertical-align: middle;"><a
                style="text-decoration: none;"
href="mailto:[email protected], [email protected]">Clamav-Users,
                Ceo</a></td>
          </tr>
          <tr style="vertical-align: top;">
            <td style="width: 120px; vertical-align: middle;"><span
                style="color: #cc0000;">Gesendet / Sent:</span></td>
            <td style="vertical-align: middle;"> Dienstag, Dezember 23,
              2025 um 16:40 (at 04:40 PM) +0100</td>
          </tr>
          <tr style="vertical-align: top;">
            <td style="width: 120px; vertical-align: middle;"><span
                style="color: #cc0000;">Betreff / Subject:</span></td>
            <td style="vertical-align: middle;">Re: [clamav-users]
              ClamAV Antivirus can't detect trojan horses?</td>
          </tr>
        </tbody>
      </table>
    </div>
    <blockquote type="cite"
cite="mid:fG5vEiKvEQMDK09eedbD54_wkQPv9Y2mTwkw6swc1E23ZaTQhk3DiJnszXjnjstZBV8Z3huHeS0tbwvUQKa76fTMtqqdmM8u3zq_De4duwk=@protonmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div style="font-family: Arial, sans-serif; font-size: 14px;">Hi,</div>
      <div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
      </div>
      <div style="font-family: Arial, sans-serif; font-size: 14px;">You
        meanĀ <span>clamav-unofficial-sigs is not being actively
          maintained any more?</span></div>
      <div style="font-family: Arial, sans-serif; font-size: 14px;"><span><br>
        </span></div>
      <div style="font-family: Arial, sans-serif; font-size: 14px;"><span>Regards,</span></div>
      <div style="font-family: Arial, sans-serif; font-size: 14px;"><span><br>
        </span></div>
      <div style="font-family: Arial, sans-serif; font-size: 14px;"><span>Mr.
          Turritopsis Dohrnii Teo En Ming</span></div>
      <div style="font-family: Arial, sans-serif; font-size: 14px;"><span>Extremely
          Democratic People's Republic of Singapore</span></div>
      <div style="font-family: Arial, sans-serif; font-size: 14px;"><span>23
          Dec 2025 Tuesday 11.39 pm Singapore Time</span></div>
      <div style="font-family: Arial, sans-serif; font-size: 14px;"
        class="protonmail_signature_block">
        <div class="protonmail_signature_block-proton"> </div>
      </div>
      <div style="font-family: Arial, sans-serif; font-size: 14px;"><br>
        <div class="protonmail_quote"> On Monday, December 22nd, 2025 at
          12:59 PM, Newcomer01 via clamav-users
          <a class="moz-txt-link-rfc2396E" href="mailto:[email protected]">&lt;[email protected]&gt;</a> wrote:<br>
          <blockquote class="protonmail_quote" type="cite">
            <div id="smartTemplate4-template">mmmhhh a project with
              round 5 years old stuff - really trustful and really up to
              date.<br>
              Is this a living project or is it discontinued without any
              notice?<br>
              Sorry not my way, will stay on clamav only.<br>
              <br>
              Oh and you can also use fangfisch, this is maintained and
              up to date</div>
            <div id="smartTemplate4-quoteHeader"><br>
              <table
style="border-collapse: collapse; width: 100%; border-top: 2px solid rgb(128, 128, 128); font-family: Verdana, Arial, sans-serif; font-size: 13px; color: rgb(0, 0, 0); background-color: rgb(238, 238, 238);">
                <tbody>
                  <tr style="vertical-align: top;">
                    <td style="width: 120px; vertical-align: middle;"><span
                        style="color: rgb(204, 0, 0);">Von / From:</span></td>
                    <td style="vertical-align: middle;"><a
                        style="text-decoration: none;"
                        href="mailto:[email protected]"
                        rel="noreferrer nofollow noopener"
                        moz-do-not-send="true">Kenneth Porter Via
                        Clamav-Users</a></td>
                  </tr>
                  <tr style="vertical-align: top;">
                    <td style="width: 120px; vertical-align: middle;"><span
                        style="color: rgb(204, 0, 0);">An / To:</span></td>
                    <td style="vertical-align: middle;"><a
                        style="text-decoration: none;"
                        href="mailto:[email protected]"
                        rel="noreferrer nofollow noopener"
                        moz-do-not-send="true">Newcomer01</a></td>
                  </tr>
                  <tr style="vertical-align: top;">
                    <td style="width: 120px; vertical-align: middle;"><span
                        style="color: rgb(204, 0, 0);">CC / CC:</span></td>
                    <td style="vertical-align: middle;"><a
                        style="text-decoration: none;"
                        href="mailto:[email protected]"
                        rel="noreferrer nofollow noopener"
                        moz-do-not-send="true">Kenneth Porter</a></td>
                  </tr>
                  <tr style="vertical-align: top;">
                    <td style="width: 120px; vertical-align: middle;"><span
                        style="color: rgb(204, 0, 0);">Gesendet / Sent:</span></td>
                    <td style="vertical-align: middle;"> Sonntag,
                      Dezember 21, 2025 um 20:11 (at 08:11 PM) +0100</td>
                  </tr>
                  <tr style="vertical-align: top;">
                    <td style="width: 120px; vertical-align: middle;"><span
                        style="color: rgb(204, 0, 0);">Betreff /
                        Subject:</span></td>
                    <td style="vertical-align: middle;">Re:
                      [clamav-users] ClamAV Antivirus can't detect
                      trojan horses?</td>
                  </tr>
                </tbody>
              </table>
            </div>
            <blockquote type="cite">
              <pre wrap="" class="moz-quote-pre">The included signatures are fair but not great. But, unlike a commercial
AV product, you're not limited to what's included in the box. There are
many sources of 3rd party signatures that can easily be added.

My detection rate improved a lot when I installed this set:

<a class="moz-txt-link-freetext"
href="https://github.com/extremeshok/clamav-unofficial-sigs"
              target="_blank" rel="noreferrer nofollow noopener"
              moz-do-not-send="true">https://github.com/extremeshok/clamav-unofficial-sigs</a>

This is an aggregation of signature sets from multiple sources.


_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
<a class="moz-txt-link-freetext"
href="https://lists.clamav.net/mailman/listinfo/clamav-users"
              target="_blank" rel="noreferrer nofollow noopener"
              moz-do-not-send="true">https://lists.clamav.net/mailman/listinfo/clamav-users</a>


Help us build a comprehensive ClamAV guide:
<a class="moz-txt-link-freetext"
              href="https://github.com/Cisco-Talos/clamav-documentation"
              target="_blank" rel="noreferrer nofollow noopener"
              moz-do-not-send="true">https://github.com/Cisco-Talos/clamav-documentation</a>

<a class="moz-txt-link-freetext"
              href="https://docs.clamav.net/#mailing-lists-and-chat"
              target="_blank" rel="noreferrer nofollow noopener"
              moz-do-not-send="true">https://docs.clamav.net/#mailing-lists-and-chat</a>
</pre>
            </blockquote>
            <br>
          </blockquote>
          <br>
        </div>
      </div>
    </blockquote>
    <br>
  </body>
</html>

--------------pPl560yCM9BJQHuQ9eejcwX6--

--===============0609623012474584121==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

--===============0609623012474584121==--