Re: missing viruses

Sascha Lucas <[email protected]> Tue, 11 May 2004 20:12:35 +0200 (CEST)
Newsgroups gmane.comp.security.virus.vtools
Message-ID <[email protected]>
Hi,

> We are running Sophie 3.81 with the newest version of Sophie, and recently

We have the same. (sophos 3.81 + sophie 3.04rc1) + NAI uvscan 
(command-line). What I see is that sophie detects near all viruses. We 
have about 10k Viruses per day. The uvscan gives only an improvement of 
about 100 Viruses per day (1%). such as Exploit-Code.

> but I also have seen what Norton recognized as MHTMLRedir.Exploit come

However we have the same thing. Sophie dosn't detect this but the NAI
uvscan. I think you should make differences between Viruses and "bad
code". It is a good feature if your AV stops Exploits but per definition
this is not a Virus.

> been a couple of days.  I was thinking about running Clam as a backup (scan

This is always a good choice. But I have no expiriences with clamd. In the 
beginning of bagle-zip-password worm it was a good thing to have clamd.

Greetings,

Sascha.