> On Sat, Feb 24, 2007 at 01:42:05AM -0500, Peter wrote:
> > I intend on running the latest amavisd-new release with both clamav
> > and a second av engine. I just can't decide on which. It is for a
> > municipal organization. Is there another free-beer
> solution or should
> > I opt for a commercial solution. What are others doing in
> this regard?
>
I use McAfee's uvscan command line scanner as a second scanner; its pretty
inexpensive, reliable (but not terribly fast). It rarely catches anything
not already detected by my clamav, but the remaining content not already
blocked by header checks, body checks, and file extension rejects is
typically phishing or trojan downloader scripts.
Here's a recent breakdown:
460 Malware by scanner -------------------------------------
458 ClamAV-clamd
25 Html.Img.Gen013.Sanesecurity.06112900
19 Html.Phishing.Rock.Sanesecurity.06050500
16 Html.Phishing.Bank.Gen175.Sanesecurity.06032008
13 Html.Phishing.Pay.Sanesecurity.06010900
12 HTML.Phishing.Pay-88
11 Html.Phishing.Azon.Gen034.Sanesecurity.06112900
9 HTML.Phishing.Bank-183
9 Html.Phishing.Bank.Gen1021.Sanesecurity.06080700
9 Html.Phishing.Hex.Gen001.Sanesecurity.06041400
8 HTML.Phishing.Bank-362
8 HTML.Phishing.Bank-766
8 HTML.Phishing.Bank-826
8 HTML.Phishing.Pay-210
7 Html.Phishing.Card.Sanesecurity.06020300
7 Html.Phishing.Slw.Gen002.Sanesecurity.06021501
6 HTML.Phishing.Pay-128
6 Html.Phishing.Bank.Gen033.Sanesecurity.06022705
6 Html.Phishing.Pay.Gen358.Sanesecurity.06091502
5 HTML.Phishing.Pay-178
5 Html.Img.Gen034.Sanesecurity.07010302
5 Html.Phishing.Bank.Gen1542.Sanesecurity.06112912
5 Html.Phishing.Bank.Gen438u.Sanesecurity.06041212
5 Html.Phishing.Pay.Gen007.Sanesecurity.06020900
5 Html.ScamL.Gen123.Sanesecurity.06082701
4 HTML.Phishing.Bank-28
4 HTML.Phishing.Bank-80
4 Html.Phishing.Azon.Gen003.Sanesecurity.06030800
4 Html.Phishing.Bank.Gen194.Sanesecurity.06032200
4 Html.Phishing.Bank.Sanesecurity.06022304
4 Html.Phishing.Pay.Gen017.Sanesecurity.06022800
3 HTML.Phishing.Auction-243
3 HTML.Phishing.Auction-252
3 HTML.Phishing.Auction-282
3 HTML.Phishing.Bank-1101
3 HTML.Phishing.Bank-49
3 HTML.Phishing.Bank-973
3 Html.Phishing.Auction.Gen319.Sanesecurity.06111000
3 Html.Phishing.Bank.Gen055.Sanesecurity.06030503
3 Html.Phishing.Bank.Gen061.Sanesecurity.06030509
3 Html.Phishing.Bank.Gen1031.Sanesecurity.06080804
3 Html.Phishing.Bank.Gen1479.Sanesecurity.06111402
3 Html.Phishing.Bank.Gen1712.Sanesecurity.07013101
3 Html.Phishing.Bank.Sanesecurity.05081600
3 Html.Phishing.Bank.Sanesecurity.06021701
3 Html.Phishing.Bank.Sanesecurity.06112903
3 Html.Phishing.Card.Sanesecurity.06022200
3 Worm.Stration.YY
2 HTML.Phishing.Acc-4
2 HTML.Phishing.Auction-202
2 HTML.Phishing.Azon-4
2 HTML.Phishing.Bank-1004
2 HTML.Phishing.Bank-1035
2 HTML.Phishing.Bank-213
2 HTML.Phishing.Bank-485
2 HTML.Phishing.Bank-651
2 HTML.Phishing.Bank-662
2 HTML.Phishing.Bank-771
2 HTML.Phishing.Bank-828
2 HTML.Phishing.Bank-917
2 HTML.Phishing.Card-41
2 HTML.Phishing.Pay-180
2 HTML.Phishing.Pay-38
2 HTML.Phishing.Pay-92
2 Html.Img.Gen055.Sanesecurity.07012201
2 Html.Phishing.Auction.Gen022.Sanesecurity.06022600
2 Html.Phishing.Auction.Gen035.Sanesecurity.06030804
2 Html.Phishing.Auction.Gen044.Sanesecurity.06030813
2 Html.Phishing.Auction.Gen302.Sanesecurity.06103000
2 Html.Phishing.Auction.Sanesecurity.06111802
2 Html.Phishing.Azon.Sanesecurity.06012600
2 Html.Phishing.Bank.Gen015.Sanesecurity.06021800
2 Html.Phishing.Bank.Gen075.Sanesecurity.06030703
2 Html.Phishing.Bank.Gen078.Sanesecurity.06030706
2 Html.Phishing.Bank.Gen101.Sanesecurity.06031001
2 Html.Phishing.Bank.Gen1036.Sanesecurity.06080809
2 Html.Phishing.Bank.Gen142.Sanesecurity.06031701
2 Html.Phishing.Bank.Gen1609.Sanesecurity.06121900
2 Html.Phishing.Bank.Gen458.Sanesecurity.06041315
2 Html.Phishing.Bank.Gen496.Sanesecurity.06041803
2 Html.Phishing.Bank.Gen845.Sanesecurity.06070708
2 Html.Phishing.Bank.Sanesecurity.06022201
2 Html.Phishing.Bank.Sanesecurity.06030605
2 Html.Phishing.Bank.Sanesecurity.06030703
2 Html.Phishing.Cur.Gen019.Sanesecurity.06071307
2 Html.Phishing.Pay.Gen015.Sanesecurity.06022700
2 Html.Phishing.Pay.Gen176.Sanesecurity.06051601
2 Html.Phishing.Pay.Gen328.Sanesecurity.06082200
2 Html.Phishing.Pay.Gen334.Sanesecurity.06082503
2 Html.Phishing.Pay.Gen391.Sanesecurity.06112402
2 Html.Phishing.Pay.Sanesecurity.06010901
1 Email.Phishing.Pay-5
1 Exploit.HTML.IFrame
1 HTML.Phishing.Auction-11
1 HTML.Phishing.Auction-145
1 HTML.Phishing.Auction-165
1 HTML.Phishing.Auction-179
1 HTML.Phishing.Auction-224
1 HTML.Phishing.Auction-271
1 HTML.Phishing.Auction-61
1 HTML.Phishing.Azon-17
1 HTML.Phishing.Bank-1122
1 HTML.Phishing.Bank-164
1 HTML.Phishing.Bank-184
1 HTML.Phishing.Bank-214
1 HTML.Phishing.Bank-261
1 HTML.Phishing.Bank-291
1 HTML.Phishing.Bank-380
1 HTML.Phishing.Bank-390
1 HTML.Phishing.Bank-462
1 HTML.Phishing.Bank-479
1 HTML.Phishing.Bank-483
1 HTML.Phishing.Bank-539
1 HTML.Phishing.Bank-547
1 HTML.Phishing.Bank-573
1 HTML.Phishing.Bank-611
1 HTML.Phishing.Bank-641
1 HTML.Phishing.Bank-652
1 HTML.Phishing.Bank-846
1 HTML.Phishing.Pay-101
1 HTML.Phishing.Pay-122
1 HTML.Phishing.Pay-131
1 HTML.Phishing.Pay-139
1 HTML.Phishing.Pay-152
1 HTML.Phishing.Pay-257
1 HTML.Phishing.Pay-51
1 HTML.Phishing.Pay-91
1 Html.Malware.Sanesecurity.06082100
1 Html.Phishing.Auction.Gen005.Sanesecurity.06012904
1 Html.Phishing.Auction.Gen008.Sanesecurity.06020101
1 Html.Phishing.Auction.Gen011.Sanesecurity.06020103
1 Html.Phishing.Auction.Gen018.Sanesecurity.06020801
1 Html.Phishing.Auction.Gen036.Sanesecurity.06030805
1 Html.Phishing.Auction.Gen056.Sanesecurity.06031300
1 Html.Phishing.Auction.Gen145.Sanesecurity.06060100
1 Html.Phishing.Auction.Gen209.Sanesecurity.06072501
1 Html.Phishing.Auction.Sanesecurity.06020100
1 Html.Phishing.Bank.Gen032.Sanesecurity.06022704
1 Html.Phishing.Bank.Gen1439.Sanesecurity.06110102
1 Html.Phishing.Bank.Gen144.Sanesecurity.06031703
1 Html.Phishing.Bank.Gen1569.Sanesecurity.06120807
1 Html.Phishing.Bank.Gen1572.Sanesecurity.06120810
1 Html.Phishing.Bank.Gen200.Sanesecurity.06032302
1 Html.Phishing.Bank.Gen259.Sanesecurity.06032806
1 Html.Phishing.Bank.Gen371.Sanesecurity.06040703
1 Html.Phishing.Bank.Gen392.Sanesecurity.06040900
1 Html.Phishing.Bank.Gen634.Sanesecurity.06051612
1 Html.Phishing.Bank.Gen676.Sanesecurity.06052509
1 Html.Phishing.Bank.Gen734.Sanesecurity.06060605
1 Html.Phishing.Bank.Sanesecurity.06022006
1 Html.Phishing.Bank.Sanesecurity.06022108
1 Html.Phishing.Bank.Sanesecurity.06022401
1 Html.Phishing.Bank.Sanesecurity.06022402
1 Html.Phishing.Bank.Sanesecurity.06120402
1 Html.Phishing.Card.Sanesecurity.06020303
1 Html.Phishing.Cur.Gen133.Sanesecurity.06092301
1 Html.Phishing.Cur.Gen189.Sanesecurity.06112002
1 Html.Phishing.Fake.Sanesecurity.06043001
1 Html.Phishing.Pay.Gen001.Sanesecurity.06012700
1 Html.Phishing.Pay.Gen013.Sanesecurity.06022200
1 Html.Phishing.Pay.Gen026.Sanesecurity.06030608
1 Html.Phishing.Pay.Gen065.Sanesecurity.06032203
1 Html.Phishing.Pay.Gen331.Sanesecurity.06082500
1 Html.Phishing.Pay.Gen374.Sanesecurity.06101700
1 Html.Phishing.Rdi.Gen063.Sanesecurity.06081600
1 Html.Phishing.Rdi.Gen064.Sanesecurity.06082100
1 Html.Phishing.Sanesecurity.TestSig
1 Html.ScamL.Gen002.Sanesecurity.06031701
1 Html.ScamL.Gen099.Sanesecurity.06060702
1 Trojan.Downloader.Small-2293
1 Trojan.Small-403
2 NAI McAfee AntiVirus (uvscan)
1 HTML.Phishing.Bank-1004
1 Trojan.Downloader.Small-2293
MrC
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
