Clam AV not detecting EML Phish-BankFraud.eml

Jeff A. Earickson jaearick at COLBY.EDU
Mon Nov 8 21:01:03 GMT 2004


upgrade, upgrade.  You need clamav 0.80 for anti-phishing.  Also,
how about running a current version of MailScanner?

On Mon, 8 Nov 2004, Venkata Achanta wrote:

> Date: Mon, 8 Nov 2004 20:52:14 +0000
> From: Venkata Achanta <vachanta at GMAIL.COM>
> Reply-To: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Clam AV not detecting EML Phish-BankFraud.eml
>
> Hello,
>
> I am running MailScanner with clamAV and the following viruses are making
> thru the Mailscanner but they are getting tagged as spam because of the
> invalid file name rules and some are even getting to the end user mail
> client.
>
> versions i am on:
> mailscanner-4.30.3-r2
>
> some of the viruses that go undetected are
>
> W32/Bagle!eml.gen
> Phish-BankFraud.eml
> clamav-0.75
>
>
> some subject line with viruses:
>
> {Invalid Filename} Re%3A-5.EML
> {Invalid Filename} Re%3A Thank you!.EML
> {Invalid Filename} Re%3A-6.EML
> {Invalid Filename} Re%3A Thank you!-3.EML
>
>
>
> Any suggestions on avoiding this except from moving to commercial AVs
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).




More information about the MailScanner mailing list