Effective virus scanners

[Antony Stone]

On Monday 25 August 2003 4:36 pm, Stephane Lentz wrote:

> On Mon, Aug 25, 2003 at 10:27:41AM -0500, Alan Fiebig wrote:
> > Just for comparison...
> >
> > I run both ClamAV and e-Trust.
> > Over the last three days:
> >    ClamAV has caught 34,248 viruses
> >    and e-Trust has caught 34,672.
> >
> > I concurr that for a free, OpenSource package, ClamAV does a very good
> > job.
> >
> > -Alan
>
> Have, you isolated the messages that contained the infected attachments
> not detected by ClamAv ?
> It would be great to submit these viruses not detected. You can do it
> through : http://clamav.sourceforge.net/cgi-bin/sendvirus.cgi

You can also simply email the offending file to virus at clamav.elektrapro.com

If ClamAV already recognises it, you'll get a bounce back for sending them a
virus :)   If ClamAV doesn't recognise it, it'll get fed into the pipeline
for processing a new signature.

> I did this for the WORM_SOBIG.F.DAM  virus. Hope they will include it
> real soon.

You can send me a copy of that if you like - I'm just creating a bunch of
ClamAV signatures now :)

Antony.

--

There are only 10 types of people in the world:
those who understand binary notation,
and those who don't.