[Slightly OT] Phishing detection

[Martin Hepworth]

Pete

it just treats is as a virus so not sure you can switch this off from a
ClamAV point of view. BUT MS might be able to do something with the
Silent Viruses option, but there are so many of them (Phishing.Bank is
up to at least 107).

 From what I'm seeing it's picking up a fair few every day(around 30% of
my virus's are these phishing things).


--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Peter Russell wrote:
> How do you turn off phishing detection in clamav?
>
> Does anyone know how accurate it is?
>
> Pete
>
> Julian Field wrote:
>
>> Alisdair Davey wrote:
>>
>>>>> A quick question for people. The IT depeartment of the
>>>>> univesrity I used to
>>>>> work out just sent out a note about its virus scanner Macafee
>>>>> detecting a
>>>>> phishing attack. I use Clamav and F-Prot onmy mail gateways
>>>>> and see plenty
>>>>> of detections of phshing attacks from clamav, but none from
>>>>> fprot. If you
>>>>> use a different virus scanner can you let me know if it
>>>>> detects phishing
>>>>> attacks. Feel free to email me personally and I'll summarize
>>>>> to the list.
>>>>>
>>>>>
>>>> I use mcafee, clamav and bitdefender. Both mcafee and clamav detect
>>>> phishing, with clamav being the one catching the most. Bitdefender
>>>> does not do phishing, so... fprot isn't alone in this... and not
>>>> entirely wrong either. Phishing is after all not really a virus type
>>>> of thing. But having the click-happy users I do, I do appreciate that
>>>> both clam and mcafee do detect/remove most:-).
>>>>
>>>> I've never seen a phish that clamav missed but mcafee caught.
>>>>
>>>> And if one wants to eb sure any phishing is real obvious, why not use
>>>> MS phishing net?
>>>>
>>>>
>>>
>>> Very true - may I take it from the lack of other responses that clamav /
>>> mcafee are the only two virus scanners to detect phishing attempts as
>>> viruses?
>>>
>> As far as I am aware, yes.
>> Of course I only use MailScanner's phishing net :-)
>>
>> --
>> Julian Field
>> www.MailScanner.info
>> Buy the MailScanner book at www.MailScanner.info/store
>> Professional Support Services at www.MailScanner.biz
>> MailScanner thanks transtec Computers for their support
>>
>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>>
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!