[Slightly OT] Phishing detection

[Peter Russell]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

How do you turn off phishing detection in clamav?

Does anyone know how accurate it is?

Pete

Julian Field wrote:
> Alisdair Davey wrote:
>
>>>> A quick question for people. The IT depeartment of the
>>>> univesrity I used to
>>>> work out just sent out a note about its virus scanner Macafee
>>>> detecting a
>>>> phishing attack. I use Clamav and F-Prot onmy mail gateways
>>>> and see plenty
>>>> of detections of phshing attacks from clamav, but none from
>>>> fprot. If you
>>>> use a different virus scanner can you let me know if it
>>>> detects phishing
>>>> attacks. Feel free to email me personally and I'll summarize
>>>> to the list.
>>>>
>>>>
>>> I use mcafee, clamav and bitdefender. Both mcafee and clamav detect
>>> phishing, with clamav being the one catching the most. Bitdefender
>>> does not do phishing, so... fprot isn't alone in this... and not
>>> entirely wrong either. Phishing is after all not really a virus type
>>> of thing. But having the click-happy users I do, I do appreciate that
>>> both clam and mcafee do detect/remove most:-).
>>>
>>> I've never seen a phish that clamav missed but mcafee caught.
>>>
>>> And if one wants to eb sure any phishing is real obvious, why not use
>>> MS phishing net?
>>>
>>>
>>
>> Very true - may I take it from the lack of other responses that clamav /
>> mcafee are the only two virus scanners to detect phishing attempts as
>> viruses?
>>
> As far as I am aware, yes.
> Of course I only use MailScanner's phishing net :-)
>
> --
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
>
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!