This is because the Sasser worm doesn't spread through E-Mail. The ID
is there so that you can scan for the file AVSERVE2.EXE. The
identification is included primarily for those folks that scan Windoze
machines via Samba.
Regards,
Mike
--- Begin Message ---
I know that Clamav has signatures in the database for the various species of
the Sasser worm and when I check the sigtool database they are listed.
What's the problem then you ask? There is not a single instance in our log
files of it hitting our filter. We've got *plenty* of others being logged
like Bagel, SomeFool, MyDoom, Gibe, Sober, BugBear, etc. No Sasser though.
This worries me. :-( I feel like the guy in the UPS commercial who can't
handle the fact that there isn't a problem. ;-D
--
Michael St. Laurent
Hartwell Corporation
-------------------------------------------------------
This SF.Net email is sponsored by: SourceForge.net Broadband
Sign-up now for SourceForge Broadband and get the fastest
6.0/768 connection for only $19.95/mo for the first 3 months!
http://ads.osdn.com/?ad_id=2562&alloc_id=6184&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
--- End Message ---
