On Tuesday 03 January 2006 10:39, Diego d'Ambra wrote: > Abdul Rehman Gani wrote: > > Hi, > > > > Clamscan currently detects Exploit.WMF.A, but F-Secure are reporting 57 > > different varieties. How many does this signature detect? > > Just an update: > > I believe that with daily.cvd version 1225, you can expect (almost) > complete detection of WMF exploits. > > Currently ClamAV has received 93 malware variants, all detected as > Exploit.WMF.A or Exploit.WMF.Gen-3. > > For those who wish to test their ClamAV installation see: > http://isc.sans.org/diary.php?rss&storyid=1006 >
I'm afraid my squid+dansguardion+clamav (with daily.cvd v 1225) does not detect exploited wmf's created by metasploit. F. _______________________________________________ http://lurker.clamav.net/list/clamav-users.html