F-prot issues

Peter Peters P.G.M.Peters at utwente.nl
Tue Jul 29 08:37:03 IST 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Scott Silva wrote on 28-7-2008 18:21:

> This won't help your F-prot problem, but I would recommend installing
> Clamav since it is free, and will give you a buffer just in case F-prot
> stops working. Clam has very good detection rates for a free product.

I use both and make reports each month. And each month ClamAV seems to
find a few more infected messages than F-prot does.

May 2008
F-Prot:
    727 W32/Netsky.P at mm
    362 HTML/IFrame
ClamAV:
    749 Worm.SomeFool.P::
    366 Exploit.HTML.IFrame::

April 2008
F-Prot:
    566 W32/Netsky.P at mm
    304 HTML/IFrame
ClamAV:
    579 Worm.SomeFool.P::
    308 Exploit.HTML.IFrame::

Only last month I saw the other way around for SomeFool.P/Netsky.P:
F-Prot:
    440 W32/Netsky.P at mm
    222 HTML/IFrame
ClamAV:
    439 Worm.SomeFool.P::
    227 Exploit.HTML.IFrame::

And besides detecting these ClamAV has a good trackrecord in detecting
phishings.

- --
Peter Peters, Teamleider Unix/Linux-Beheer
ICT-Servicecentrum
Universiteit Twente, Postbus 217, 7500 AE Enschede
Telefoon 053 489 2301, Fax 053 489 2383,
P.G.M.Peters at utwente.nl, http://www.utwente.nl/icts
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIjsifelLo80lrIdIRAuKEAKCJ0q/Lfce2SaXY2uqqhh3hELkrOwCfSyM4
MxM0dcspz2y97IWvwUbVLUs=
=cvIL
-----END PGP SIGNATURE-----


More information about the MailScanner mailing list