Re: ClamAV Antivirus can't detect trojan horses?

Joel Esler via clamav-users <[email protected]> Tue, 23 Dec 2025 11:52:44 -0500
Newsgroups gmane.comp.security.virus.clamav.user
Message-ID <[email protected]>
--===============5273471593664722389==
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html class=3D"apple-mail-supports-explicit-dark-mode"><head><meta http-equi=
v=3D"content-type" content=3D"text/html; charset=3Dutf-8"></head><body dir=3D=
"auto">There is a difference in between =E2=80=9Cnot being maintained=E2=80=9D=
 and =E2=80=9Cstill works=E2=80=9D.&nbsp;<div><br></div><div>If it still wor=
ks, the date of the last commit is irrelevant&nbsp;<br id=3D"lineBreakAtBegi=
nningOfSignature"><div dir=3D"ltr"><div><br></div>=E2=80=94&nbsp;<div><span s=
tyle=3D"background-color: rgba(255, 255, 255, 0);">Sent from my =F0=9F=93=B1=
iPhone</span></div></div><div dir=3D"ltr"><br><blockquote type=3D"cite">On D=
ec 23, 2025, at 11:06, Newcomer01 via clamav-users &lt;[email protected]=
amav.net&gt; wrote:<br><br></blockquote></div><blockquote type=3D"cite"><div=
 dir=3D"ltr">=EF=BB=BF

 =20
    <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF-8"=
>
 =20
 =20
    <div id=3D"smartTemplate4-template">Yes, open the link and see the
      really old dates of this project, since 7.2.5 of March '21 no
      newer version was delivered and in the master tree (files for this
      project) the last changes was before 4-6 years:
      <a class=3D"moz-txt-link-freetext" href=3D"https://github.com/extremes=
hok/clamav-unofficial-sigs">https://github.com/extremeshok/clamav-unofficial=
-sigs</a><br>
      I'm personally not sure if this project is in active developing
      anymore ...<br>
      <br>
      On other hand, fangfrisch is much more up to date, last version
      1.9.2 of April '25 and in the master tree the last changes was
      before 6-11 months: <a class=3D"moz-txt-link-freetext" href=3D"https:/=
/github.com/rseichter/fangfrisch">https://github.com/rseichter/fangfrisch</a=
> and
      the developer promote always here his new version and what is
      changed or maybe what technical problems he have / had</div>
    <div id=3D"smartTemplate4-quoteHeader"><br>
      <table style=3D"border-collapse: collapse; width: 100%; border-top: 2p=
x solid #808080; font-family: Verdana, Arial, sans-serif; color: #000000; fo=
nt-size: 13px; background-color: #eeeeee;">
        <tbody>
          <tr style=3D"vertical-align: top;">
            <td style=3D"width: 120px; vertical-align: middle;"><span style=3D=
"color: #cc0000;">Von / From:</span></td>
            <td style=3D"vertical-align: middle;"><a style=3D"text-decoratio=
n: none;" href=3D"mailto:[email protected]">Turritopsis
                Dohrnii Teo En Ming</a></td>
          </tr>
          <tr style=3D"vertical-align: top;">
            <td style=3D"width: 120px; vertical-align: middle;"><span style=3D=
"color:#cc0000;">An / To:</span></td>
            <td style=3D"vertical-align: middle;"><a style=3D"text-decoratio=
n: none;" href=3D"mailto:[email protected]">Newcomer01</a></td>
          </tr>
          <tr style=3D"vertical-align: top;">
            <td style=3D"width: 120px; vertical-align: middle;"><span style=3D=
"color: #cc0000;">CC / CC:</span></td>
            <td style=3D"vertical-align: middle;"><a style=3D"text-decoratio=
n: none;" href=3D"mailto:[email protected], ceo@teo-en-ming-corp=
.com">Clamav-Users,
                Ceo</a></td>
          </tr>
          <tr style=3D"vertical-align: top;">
            <td style=3D"width: 120px; vertical-align: middle;"><span style=3D=
"color: #cc0000;">Gesendet / Sent:</span></td>
            <td style=3D"vertical-align: middle;"> Dienstag, Dezember 23,
              2025 um 16:40 (at 04:40 PM) +0100</td>
          </tr>
          <tr style=3D"vertical-align: top;">
            <td style=3D"width: 120px; vertical-align: middle;"><span style=3D=
"color: #cc0000;">Betreff / Subject:</span></td>
            <td style=3D"vertical-align: middle;">Re: [clamav-users]
              ClamAV Antivirus can't detect trojan horses?</td>
          </tr>
        </tbody>
      </table>
    </div>
    <blockquote type=3D"cite" cite=3D"mid:fG5vEiKvEQMDK09eedbD54_wkQPv9Y2mTw=
kw6swc1E23ZaTQhk3DiJnszXjnjstZBV8Z3huHeS0tbwvUQKa76fTMtqqdmM8u3zq_De4duwk=3D=
@protonmail.com">
      <meta http-equiv=3D"content-type" content=3D"text/html; charset=3DUTF-=
8">
      <div style=3D"font-family: Arial, sans-serif; font-size: 14px;">Hi,</d=
iv>
      <div style=3D"font-family: Arial, sans-serif; font-size: 14px;"><br>
      </div>
      <div style=3D"font-family: Arial, sans-serif; font-size: 14px;">You
        mean&nbsp;<span>clamav-unofficial-sigs is not being actively
          maintained any more?</span></div>
      <div style=3D"font-family: Arial, sans-serif; font-size: 14px;"><span>=
<br>
        </span></div>
      <div style=3D"font-family: Arial, sans-serif; font-size: 14px;"><span>=
Regards,</span></div>
      <div style=3D"font-family: Arial, sans-serif; font-size: 14px;"><span>=
<br>
        </span></div>
      <div style=3D"font-family: Arial, sans-serif; font-size: 14px;"><span>=
Mr.
          Turritopsis Dohrnii Teo En Ming</span></div>
      <div style=3D"font-family: Arial, sans-serif; font-size: 14px;"><span>=
Extremely
          Democratic People's Republic of Singapore</span></div>
      <div style=3D"font-family: Arial, sans-serif; font-size: 14px;"><span>=
23
          Dec 2025 Tuesday 11.39 pm Singapore Time</span></div>
      <div style=3D"font-family: Arial, sans-serif; font-size: 14px;" class=3D=
"protonmail_signature_block">
        <div class=3D"protonmail_signature_block-proton"> </div>
      </div>
      <div style=3D"font-family: Arial, sans-serif; font-size: 14px;"><br>
        <div class=3D"protonmail_quote"> On Monday, December 22nd, 2025 at
          12:59 PM, Newcomer01 via clamav-users
          <a class=3D"moz-txt-link-rfc2396E" href=3D"mailto:clamav-users@lis=
ts.clamav.net">&lt;[email protected]&gt;</a> wrote:<br>
          <blockquote class=3D"protonmail_quote" type=3D"cite">
            <div id=3D"smartTemplate4-template">mmmhhh a project with
              round 5 years old stuff - really trustful and really up to
              date.<br>
              Is this a living project or is it discontinued without any
              notice?<br>
              Sorry not my way, will stay on clamav only.<br>
              <br>
              Oh and you can also use fangfisch, this is maintained and
              up to date</div>
            <div id=3D"smartTemplate4-quoteHeader"><br>
              <table style=3D"border-collapse: collapse; width: 100%; border=
-top: 2px solid rgb(128, 128, 128); font-family: Verdana, Arial, sans-serif;=
 font-size: 13px; color: rgb(0, 0, 0); background-color: rgb(238, 238, 238);=
">
                <tbody>
                  <tr style=3D"vertical-align: top;">
                    <td style=3D"width: 120px; vertical-align: middle;"><spa=
n style=3D"color: rgb(204, 0, 0);">Von / From:</span></td>
                    <td style=3D"vertical-align: middle;"><a style=3D"text-d=
ecoration: none;" href=3D"mailto:[email protected]" rel=3D"noref=
errer nofollow noopener" moz-do-not-send=3D"true">Kenneth Porter Via
                        Clamav-Users</a></td>
                  </tr>
                  <tr style=3D"vertical-align: top;">
                    <td style=3D"width: 120px; vertical-align: middle;"><spa=
n style=3D"color: rgb(204, 0, 0);">An / To:</span></td>
                    <td style=3D"vertical-align: middle;"><a style=3D"text-d=
ecoration: none;" href=3D"mailto:[email protected]" rel=3D"noreferrer nof=
ollow noopener" moz-do-not-send=3D"true">Newcomer01</a></td>
                  </tr>
                  <tr style=3D"vertical-align: top;">
                    <td style=3D"width: 120px; vertical-align: middle;"><spa=
n style=3D"color: rgb(204, 0, 0);">CC / CC:</span></td>
                    <td style=3D"vertical-align: middle;"><a style=3D"text-d=
ecoration: none;" href=3D"mailto:[email protected]" rel=3D"noreferrer no=
follow noopener" moz-do-not-send=3D"true">Kenneth Porter</a></td>
                  </tr>
                  <tr style=3D"vertical-align: top;">
                    <td style=3D"width: 120px; vertical-align: middle;"><spa=
n style=3D"color: rgb(204, 0, 0);">Gesendet / Sent:</span></td>
                    <td style=3D"vertical-align: middle;"> Sonntag,
                      Dezember 21, 2025 um 20:11 (at 08:11 PM) +0100</td>
                  </tr>
                  <tr style=3D"vertical-align: top;">
                    <td style=3D"width: 120px; vertical-align: middle;"><spa=
n style=3D"color: rgb(204, 0, 0);">Betreff /
                        Subject:</span></td>
                    <td style=3D"vertical-align: middle;">Re:
                      [clamav-users] ClamAV Antivirus can't detect
                      trojan horses?</td>
                  </tr>
                </tbody>
              </table>
            </div>
            <blockquote type=3D"cite">
              <pre wrap=3D"" class=3D"moz-quote-pre">The included signatures=
 are fair but not great. But, unlike a commercial
AV product, you're not limited to what's included in the box. There are
many sources of 3rd party signatures that can easily be added.

My detection rate improved a lot when I installed this set:

<a class=3D"moz-txt-link-freetext" href=3D"https://github.com/extremeshok/cl=
amav-unofficial-sigs" target=3D"_blank" rel=3D"noreferrer nofollow noopener"=
 moz-do-not-send=3D"true">https://github.com/extremeshok/clamav-unofficial-s=
igs</a>

This is an aggregation of signature sets from multiple sources.


_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
<a class=3D"moz-txt-link-freetext" href=3D"https://lists.clamav.net/mailman/=
listinfo/clamav-users" target=3D"_blank" rel=3D"noreferrer nofollow noopener=
" moz-do-not-send=3D"true">https://lists.clamav.net/mailman/listinfo/clamav-=
users</a>


Help us build a comprehensive ClamAV guide:
<a class=3D"moz-txt-link-freetext" href=3D"https://github.com/Cisco-Talos/cl=
amav-documentation" target=3D"_blank" rel=3D"noreferrer nofollow noopener" m=
oz-do-not-send=3D"true">https://github.com/Cisco-Talos/clamav-documentation<=
/a>

<a class=3D"moz-txt-link-freetext" href=3D"https://docs.clamav.net/#mailing-=
lists-and-chat" target=3D"_blank" rel=3D"noreferrer nofollow noopener" moz-d=
o-not-send=3D"true">https://docs.clamav.net/#mailing-lists-and-chat</a>
</pre>
            </blockquote>
            <br>
          </blockquote>
          <br>
        </div>
      </div>
    </blockquote>
    <br>
 =20

<span>_______________________________________________</span><br><span></span=
><br><span>Manage your clamav-users mailing list subscription / unsubscribe:=
</span><br><span>https://lists.clamav.net/mailman/listinfo/clamav-users</spa=
n><br><span></span><br><span></span><br><span>Help us build a comprehensive C=
lamAV guide:</span><br><span>https://github.com/Cisco-Talos/clamav-documenta=
tion</span><br><span></span><br><span>https://docs.clamav.net/#mailing-lists=
-and-chat</span><br></div></blockquote></div></body></html>=

--===============5273471593664722389==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

--===============5273471593664722389==--