== CLAMAV False Positives/Negatives == === To report a false positive w/ a clamav signature === Please send us the following information with your false positive report: # Your account name # The name of the signature that was triggered # How it was triggered (uploaded via FTP/Web, blocked locally via dazuko, etc.) # The specific error message(s) your application produced when the file was rejected. # The ASL web console message, or the log entry in /var/log/clamav/clamd.log for this event. # And the file that was incorrect detected in a zip, tar, rar or bz archive format. '''Please put a password on the archive to ensure that it is not rejected by any email or upload antivirus scanners in route to us.''' To report the false positive, please open either a case in the [https://www.atomicorp.com/support/support-portal.html support portal] or email us the false positive report to support AT atomicorp DOT com. You can also disable a signature by following this process: https://www.atomicorp.com/wiki/index.php/Atomic_CLAMAV_Signatures_FAQ#Disabling_signatures === To report a false negative === Please send us the following information with your false negative report: # Your account name # The name of the malware as detected by other scanners (if this information exists, if this is a zero day, please state that) # How it was discovered (uploaded to system, found on desktop, etc.) # And the malicious software in a zip, tar, rar or bz archive format. Please put a password on the archive to ensure that it is not rejected by any antivirus scanners in route to us. To report the false negative, please open either a case in the [https://www.atomicorp.com/support/support-portal.html support portal] or email us the false negative report to support AT atomicorp DOT com. Note: ASL includes malware upload protection support, Rules Only licenses do not. === To report a new piece of malware === Please send us the following information with your false negative report: #Your account name #The name of the malware as detected by other scanners (if this information exists, if this is a zero day, please state that) #How it was discovered (uploaded to system, found on desktop, etc.) #And the malicious software in a zip, tar, rar or bz archive format. Please put a password on the archive to ensure that it is not rejected by any email antivirus scanners in route to us. To report the false negative, please open either a case in the support portal or email us the false negative report to support AT atomicorp DOT com.