Some issues with Sophos in Mailscanner

[Mark Sapiro]

On 11/20/19 5:38 AM, info at schroeffu.ch wrote:
> OK, today Sophos detected its first real virus, a compromized HTML ^_^
> 
> 
> Sophos: >>> Virus 'Troj/HTMLDrop-T' found in file
> (...)DHL_Deklaration_734.html
> 
> So scan engine seems to work, but for me it seems the detection rate is
> very low in comparison to ClamAV (+SaneSecurity) + ESETS.
...> 20. November 2019 11:26, info at schroeffu.ch <mailto:info at schroeffu.ch>
> schrieb:
> 
>     For years i am running ESETS and CLAMAV + SaneSecurity, but the
>     detection is not as good as i wish. So i installed additonally
>     sophos days go to compare.


Most of the SaneSecurity sigs are designed to detect spam and phishing
rather than actual virus/malware.


-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan