On Friday 09 April 2004 3:15 pm, Henry Harvey wrote:

> Would it be possible to report what
> viruses (names) are not being detected by ClamAV,
> instead of submitting a sample?

That isn't much use, since without a sample we can't generate a signature.

> We have Symantec Corporate Ed AV running on
> all workstations and it blocks those files
> from even saving to any pc. I have the logs
> which says that
>
> [EMAIL PROTECTED]
ClamAV calls that one Worm.SomeFool.P
> [EMAIL PROTECTED]
I've never seen that oen - don't know what ClamAV calls it
> [EMAIL PROTECTED]
ClamAV calls that one Worm.SomeFool.Gen-1
> [EMAIL PROTECTED]
I haven't seen that one here
> [EMAIL PROTECTED]
ClamAV calls that oen Worm.SCO.A
> [EMAIL PROTECTED]
ClamAV calls that one Trojan.Dropper.C

> are still being delivered to workstations.
> Meaning they were not stopped by ClamAV.

In that case there must be some problenm with your MTA/ClamAV setup, since 
mine is detecting them fine here (an old version of ClamAV running under an 
old version of MailScanner).

> A search on the database of ClamAV results
> with nothing with those same variants.

Have you *read* any of the postings recently about virus names and different 
A-V vendors' inconsistencies!?

> ClamAV works perfectly fine with other viruses though, like those "SomeFool"
> viruses.

Good.

> Can I just report those names with no samples?

(a) you already did

(b) without a sample we can't add anything to the signatures' list - it's not 
like you just have to know someone else's name for a virus and you can 
automagically detect it.

Regards,

Antony.

-- 
The idea that Bill Gates appeared like a knight in shining armour to lead all 
customers out of a mire of technological chaos neatly ignores the fact that 
it was he who, by peddling second-rate technology, led them into it in the 
first place.

 - Douglas Adams in The Guardian, 25th August 1995

                                                     Please reply to the list;
                                                           please don't CC me.



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to