On Fri, Feb 14, 2003 at 04:02:54PM +, Antony Stone wrote:
> Hi.
>
> When a clam signature gets created for a newly-discovered (invented?) virus,
> where does the name come from?
>
> I would like to be able to point users to a website containing info about the
> virus, but the name seems to
Hi.
When a clam signature gets created for a newly-discovered (invented?) virus,
where does the name come from?
I would like to be able to point users to a website containing info about the
virus, but the name seems to vary from one anti-virus vendor to another.
Does clam follow some agree con
That is perfectly as it should work :)
there is infact 2 "viruses", one a dangerous exploit and the other a virus
in the mails you scanning. it should pick both up, cause the mail is infected
with both IFrame exploit is also used with alot of the NEW NEW viruses,
so this protects you if a ne
On Fri, 14 Feb 2003, Nigel Kukard wrote:
> most klez infections use the IFrame exploit, so infact the IFrame Exploit
> will match before the klez one. what we do is break up the email into all
> the mime peices, decode them and scan the individual portions, most of the
> time clamscan picks up both
most klez infections use the IFrame exploit, so infact the IFrame Exploit
will match before the klez one. what we do is break up the email into all
the mime peices, decode them and scan the individual portions, most of the
time clamscan picks up both iframe & klez, iframe being the first mime part
clamd usually catches between 100-160 klez infections per day on e-mail to
our domain.
The day the Exploit.IFrame and Exploit.IFrame.HTML rules were added, only
64 were caught (our rules update at 11am, and 11pm EST).
Today, only 26 klez were caught.
I highly doubt all those klez infections magic
Hi Ed
Thank you for that - I have read all the docs and clamscan / clamd /
freshclam is working A-OK!
My problem stems from the fact that I use eXtremail - and it supports
Sophos - but that support is in beta. Sophos also needs a stack of extra
parameters passed with the instruction ie. [EMAIL PR
