Many viruses not being detected :-(

Thom Paine thom at CUSTOMNETWORKS.CA
Wed Aug 4 15:14:10 IST 2004


Usually the SARC or McAfee site have an alias list of the viruses as well.
You could check their site and see what other AV scanners call the same
virus.

Here's an example.

W32.Evaman.C at mm
WORM_MYDOOM.O [Trend Micro], W32/Mydoom.q at MM [McAfee], W32/MyDoom-Q[Sophos]

Does that help?

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Pete
Sent: Wednesday, August 04, 2004 9:53 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Many viruses not being detected :-(


>
>
> Admittedly my version of ClamAv and MailScanner are both a bit older 
> than yours, but my copy of Clam does catch Netsky.Z, although it calls 
> it Worm.SomeFool.Z.

How do you match up the popular/common name of the viruses with the clamav
obscure name?

My boss gets these watchguard newsletters telling him to look out for X
virus, which he forwards to me with a "are we protected against this" - i
can never tell, so i answer yes and hope - i would love to improve on this
:)

thanks
Pete

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html



More information about the MailScanner mailing list