R: [Clamav-users] Exploit-Mime.gen.c detection

2004-11-03 Thread Cali Federico 

Do you know if it is possible to obtain the same behavior of the WebShield?
I'm using (postfix,amavisd-new,clamav)

Federico


-Messaggio originale-
Da: Joe Maimon [mailto:[EMAIL PROTECTED]
Inviato: martedì 2 novembre 2004 21.18
A: ClamAV users ML
Oggetto: Re: [Clamav-users] Exploit-Mime.gen.c detection




Cali Federico wrote:

>Hi all,
>analyzing the same e-mail with two different antivirus software I have different 
>results:
>
>-- ClamAv detects Worm.SomeFool.p virus
>
>-- McAfee WebShield detects both W32/[EMAIL PROTECTED] and Exploit-MIME.gen.c 
>
>
>I know that Worm.SomeFool.p and W32/[EMAIL PROTECTED] are the same but what about 
>Exploit ?
>
>Could you explain me why ClamAv doesn't detect this virus?
>  
>
I believe clam stops after the first virus found

>Thanks a lot
>
>Federico
>
>
>
>
>
>___
>http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
>  
>
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] Exploit-Mime.gen.c detection

2004-11-02 Thread Joe Maimon 

Cali Federico wrote:
Hi all,
analyzing the same e-mail with two different antivirus software I have different 
results:
-- ClamAv detects Worm.SomeFool.p virus
-- McAfee WebShield detects both W32/[EMAIL PROTECTED] and Exploit-MIME.gen.c 

I know that Worm.SomeFool.p and W32/[EMAIL PROTECTED] are the same but what about 
Exploit ?
Could you explain me why ClamAv doesn't detect this virus?
 

I believe clam stops after the first virus found
Thanks a lot
Federico


___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
 

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] Exploit-Mime.gen.c detection

2004-11-02 Thread Cali Federico 
Hi all,
analyzing the same e-mail with two different antivirus software I have different 
results:

-- ClamAv detects Worm.SomeFool.p virus

-- McAfee WebShield detects both W32/[EMAIL PROTECTED] and Exploit-MIME.gen.c 


I know that Worm.SomeFool.p and W32/[EMAIL PROTECTED] are the same but what about 
Exploit ?

Could you explain me why ClamAv doesn't detect this virus?

Thanks a lot

Federico





___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users