Re: [Clamav-users] Netsky P not being blocked, using 0.70-rc

[Jeff Ramsey]

I have done some further testing, and I am blocking Somefool and 
Somefool.B, but I am not blocking variant P. My Sophos is picking it up 
as Netsky P. Both Sophos and clamav are being called by Amavisd-new via 
sendmail milter. Is there some sort of binary on my box that I have 
forgotten to give the clamav user executable permissions to, like unzip 
or ?

I'd really like to drop Sophos altogether, but right now as it stands, 
I'd being cleaning Netsky.P all day long.

Thanks,
Jeff Ramsey
On Apr 8, 2004, at 8:41 AM, Amish Munshi wrote:

On Wed, 7 Apr 2004 20:22:07 +0100, "Antony Stone"
<[EMAIL PROTECTED]> said:
On Wednesday 07 April 2004 7:59 pm, Jeff Ramsey wrote:

I'm picking up Worm.SomeFool.P (aka Worm/NetSky.P according to 
Antivir,
W32/[EMAIL PROTECTED] according to F-Prot, W32/[EMAIL PROTECTED] according to
McAfee)
with a very old version of ClamAV (0.60 running under MailScanner)


  I am also facing the same problem, I have recently tested and 
installed
  Clamav, postfix combi. Tests with the sample test viruses given did
  succeed, so I assumed that the installation is successfull. But the
  mail containing a virus was delivered to OE and Norton AV detected 
it.
  Well, my client is not technical so I manged to convince him that it 
is
  not a problem and since it is a new virus it will be fixed
  automatically.
  I scanned the file which had that virus and clamav detected the 
virus.
  Any clues what is wrong here?

Regards,

Antony.

--
The lottery is a tax for people who can't do maths.
                                                     Please reply to 
the
                                                     list;
                                                           please 
don't
                                                           CC me.



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
--
http://www.fastmail.fm - Access your email from home and the web
-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users