Weird Virus showing with Kaspersky but not ClamAV

[JonathanLee]

Has anyone else seen this virus before? This is showing up on a fact check website a student shared at the university.

Please yet me know I think it is a real item however my Squid ClamAV does not see this one. I am running SSL Intercept so it does detect https viruses as seen here.

On the 2100 the only way for it to work with how much memory ClamAV uses was to adapt the concurrent reload and set it to no for updates.

Long story short what is HEUR:Trojan-PSW

I thought Cisco's ClamAV would spot it long before my host machine's antivirus software. Weird normally Cisco's ClamAV stops it all before it gets to my machines.

[johnpoz]

@JonathanLee totalvirus shows it as clean

https://www.virustotal.com/gui/url/d2dd9546c1dddaf34268933648d6fc514eb547602c2fc456bbf9176f150657be

[Dobby_]

@JonathanLee said in Weird Virus showing with Kaspersky but not ClamAV:

I thought Cisco's ClamAV would spot it long before my host machine's antivirus software. Weird normally Cisco's ClamAV stops it all before it gets to my machines.

ClamAV is nearly to 60 % effective in virus hunt then others you must pay for.

[lolip]

If Kaspersky detects a weird virus that ClamAV doesn't, it may be due to differences in their virus databases.

[Dobby_]

@JonathanLee

But you can set up your own virus databases, such as a french company
is offering free private and paid for business customers. You will be able
to reach then somethings about 4.000.000 viruses ClamAV can be find.

There are also on github projects or else where in the internet you can
search for, and they may let you also for free use their databases to
gain security more.

[JonathanLee]

@Dobby_ That website no longer gives out a free version after so many days they disable it and expect you to pay now.