Clam AV not detecting EML Phish-BankFraud.eml

[Steve Swaney]

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Venkata Achanta
> Sent: Monday, November 08, 2004 3:52 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Clam AV not detecting EML Phish-BankFraud.eml
>
> Hello,
>
>  I am running MailScanner with clamAV and the following viruses are making
> thru the Mailscanner but they are getting tagged as spam because of the
> invalid file name rules and some are even getting to the end user mail
> client.
>
> versions i am on:
> mailscanner-4.30.3-r2
>
> some of the viruses that go undetected are
>
> W32/Bagle!eml.gen
> Phish-BankFraud.eml
> clamav-0.75
>
> Any suggestions on avoiding this except from moving to commercial AVs

Your version of ClamAV is a bit old. Update to the latest version of ClamAV
0.80 and call ClamAV in MailScanner.conf using

Virus Scanners = clamavmodule

You'll first need to install the Mail::ClamAV module to do this.

Update MailScanner to the latest version bedore updating ClamAV and
installing Mail::CLamAV as Julian's added some Phishing detection and
support for ClamAV with the latest version of Mail::ClamAV in version
4.35.11-1

Also Bitdefender has a free Linux Esition available:

        http://www.bitdefender.com/bd/site/downloads.php?menu_id=21

Steve
Steve Swaney
President
Fortress Systems Ltd.
www.fsl.com
steve.swaney at fsl.com


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Fortress Systems Ltd.
www.fsl.com

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).