On Tuesday 03 January 2006 10:39, Diego d'Ambra wrote:
> Abdul Rehman Gani wrote:
> > Hi,
> >
> > Clamscan currently detects Exploit.WMF.A, but F-Secure are reporting  57
> > different varieties. How many does this signature detect?
>
> Just an update:
>
> I believe that with daily.cvd version 1225, you can expect (almost)
> complete detection of WMF exploits.
>
> Currently ClamAV has received 93 malware variants, all detected as
> Exploit.WMF.A or Exploit.WMF.Gen-3.
>
> For those who wish to test their ClamAV installation see:
> http://isc.sans.org/diary.php?rss&storyid=1006
>

I'm afraid my squid+dansguardion+clamav (with daily.cvd v 1225) does not 
detect exploited wmf's created by metasploit.

F.
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to