does SophosSAVI detect trojans?

Greg Matthews gmatt at NERC.AC.UK
Fri Oct 28 14:49:52 IST 2005


On Fri, 2005-10-28 at 13:06 +0100, Martin Hepworth wrote:
> Greg
> 
> Nope - sometimes it will let the email through, as it's only a html url to
> the actual malware.
> 
> It will trigger on VBS macro issues....

ok. I guess the only way to try it is to find one and send it through,
and then see if it triggeres as VBS/foo or W32/foo.

> BUT the problem is still at the desktop, so you still need AV there.

agreed.

> Can't see any reference to the looksky-b stuff anywhere, do you mean
> netsky-b? In which case yes Sophos will detects that fine (looking at my
> logs for the last few week there's still lots of them about.

looksky.b is the symantec name - I have no idea what its called by
sophos or clam.

G


-- 
Greg Matthews           01491 692445
Head of UNIX/Linux, iTSS Wallingford

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!



More information about the MailScanner mailing list