> This is an interesting list for what it shows. It is a list 
> from the last 10,000 "viruses" caught here where there were 
> 10 or more of a particular virus caught. Clearly most of them 
> are not viruses at all but image spam and penny stock scams. 
> Might be time to re-word the way the information is reported 
> back to the milter. The message says it's all viruses.
> 
> It also shows that Steve's lists from Sane Security are 
> continuing to kick some serious butt. Thanks again, Steve!
> 
> 
> count pattern
> 1233 Email.Img.Gen021.Sanesecurity.06126001
> 1182 Email.Img.Gen018.Sanesecurity.06122000
> 1053 Email.Img.Gen016.Sanesecurity.06121201
>   812 Email.Hdr.Sanesecurity.07012400
>   659 Email.Img.Gen001.Sanesecurity.06111101
>   283 Html.Img.Gen013.Sanesecurity.06112900
>   197 Email.Stk.Gen298.Sanesecurity.07021504
>   196 Email.Stk.Gen294.Sanesecurity.07021500
>   191 Email.Stk.Gen299.Sanesecurity.07021505
>   180 Email.Stk.Gen297.Sanesecurity.07021503
>   175 Email.Stk.Gen295.Sanesecurity.07021501
>   173 Email.Stk.Gen300.Sanesecurity.07021506
>   169 Email.Stk.Gen296.Sanesecurity.07021502
>   140 Email.Spam.Gen253.Sanesecurity.07022303
>   139 Email.Img.Gen040.Sanesecurity.07010600
>   120 Email.Img.Gen064.Sanesecurity.07022301
>   116 Email.Spam.Gen103.Sanesecurity.07011703
>    89 Email.Img.Gen031.Sanesecurity.07010100

On 2/24, I posted similar findings on the amavisd-new list.  When I updated
my amavis logwatch filter/reporter, I added a Malware by Scanner section and
was pleased to see how Steve's lists have been very, very helpful.

An upcoming amavisd-new release provides the ability to consider Phishing
scams, etc. as spam rather than viruses.

MrC

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to