> This is an interesting list for what it shows. It is a list > from the last 10,000 "viruses" caught here where there were > 10 or more of a particular virus caught. Clearly most of them > are not viruses at all but image spam and penny stock scams. > Might be time to re-word the way the information is reported > back to the milter. The message says it's all viruses. > > It also shows that Steve's lists from Sane Security are > continuing to kick some serious butt. Thanks again, Steve! > > > count pattern > 1233 Email.Img.Gen021.Sanesecurity.06126001 > 1182 Email.Img.Gen018.Sanesecurity.06122000 > 1053 Email.Img.Gen016.Sanesecurity.06121201 > 812 Email.Hdr.Sanesecurity.07012400 > 659 Email.Img.Gen001.Sanesecurity.06111101 > 283 Html.Img.Gen013.Sanesecurity.06112900 > 197 Email.Stk.Gen298.Sanesecurity.07021504 > 196 Email.Stk.Gen294.Sanesecurity.07021500 > 191 Email.Stk.Gen299.Sanesecurity.07021505 > 180 Email.Stk.Gen297.Sanesecurity.07021503 > 175 Email.Stk.Gen295.Sanesecurity.07021501 > 173 Email.Stk.Gen300.Sanesecurity.07021506 > 169 Email.Stk.Gen296.Sanesecurity.07021502 > 140 Email.Spam.Gen253.Sanesecurity.07022303 > 139 Email.Img.Gen040.Sanesecurity.07010600 > 120 Email.Img.Gen064.Sanesecurity.07022301 > 116 Email.Spam.Gen103.Sanesecurity.07011703 > 89 Email.Img.Gen031.Sanesecurity.07010100
On 2/24, I posted similar findings on the amavisd-new list. When I updated my amavis logwatch filter/reporter, I added a Malware by Scanner section and was pleased to see how Steve's lists have been very, very helpful. An upcoming amavisd-new release provides the ability to consider Phishing scams, etc. as spam rather than viruses. MrC _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html