Virus slow down?

[Randal, Phil]

See http://www.sng.ecs.soton.ac.uk/mailscanner/serve/cache/277.html

We're still seeing a drop in virus numbers today.

The calm before the next storm, probably.

Phil

----
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK  

> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Scott Silva
> Sent: 06 January 2006 17:13
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Virus slow down?
> 
> Alisdair Davey spake the following on 1/6/2006 8:44 AM:
> > On Fri, 2006-01-06 at 11:35 -0500, DAve wrote:
> > 
> >>Is anyone else noticing a huge drop in viruses? Last night 
> at 10pm EST 
> >>my virus captures dropped to an all time low. I generally 
> catch around 
> >>1100 per day, per server, and I have only caught 60 so far today.
> >>
> >>Everything else in MailScanner MRTG looks good, Clam and BD 
> are up to 
> >>date, no problems in the logs. I don't suspect anything wrong on my 
> >>end, just a pleasent lack of viruses.
> > 
> > 
> > Since I upgraded to 4.48.4, I have had a week with pretty much zero 
> > virus detections (some filename catches by MailScanner)...after a 
> > couple of days of this it scared me! So I tried sending EICAR and a 
> > few less friendly viruses through the system and the 
> detection seems 
> > to work fine. On the other hand spam detection is at an all 
> time high! 
> > It looks like pretty much everything is being detected as High Spam.
> > Cheers
> > Alisdair
> > 
> > 
> If you are using Pyzor, Razor, DCC a lot of the viruses that 
> don't mutate heavily are getting marked as spam. Be careful 
> if you let users release their own spam!
> 
> 
> -- 
> 
> /-----------------------\           |~~\_____/~~\__  |
> | MailScanner; The best |___________ \N1____====== )-+
> | protection on the net!|                   ~~~|/~~  |
> \-----------------------/                      ()
> 
> ------------------------ MailScanner list 
> ------------------------ To unsubscribe, email 
> jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) 
> and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!
> 

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!