Excellent.
Thanks Scott!
-Nick
Scott Fisher wrote:
Thanks Bill, that's pretty nice. I've tripped over that page before,
but I never noticed the download link.
They are catching phish already here.
For the purposes of the list, here's the command file I put together
to download updates. I scheduled it for twice a day. Since it only
downloads the file if newer, I might be able to schedule more often.
wget -N -t 3 -nd http://www.sanesecurity.com/clamav/phish.ndb
erase c:\clamav-devel\share\clamav\phish.ndb
copy phish.ndb c:\clamav-devel\share\clamav\phish.ndb
c:\clamav-devel\bin\freshclam.exe
----- Original Message ----- From: "Bill Landry" <[EMAIL PROTECTED]>
To: <Declude.JunkMail@declude.com>
Sent: Tuesday, February 21, 2006 11:43 PM
Subject: Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters
BTW, if you are running ClamAV, and want to take full advantage of it's
phish catching capabilities, you might was to take a look at adding the
phish signature file that Steve Basford put together (see the attached
e-mail for details). I have been running them for a few weeks, and
they are
quite awesome. Steve periodically updates the phish signatures, as
well, so
check regularly for an updated file.
Bill
----- Original Message ----- From: "Scott Fisher"
<[EMAIL PROTECTED]>
To: <Declude.JunkMail@declude.com>
Sent: Tuesday, February 21, 2006 10:14 AM
Subject: Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters
Aaarrgg.
Good catch Bill.
----- Original Message ----- From: "Bill Landry" <[EMAIL PROTECTED]>
To: <Declude.JunkMail@declude.com>
Sent: Tuesday, February 21, 2006 12:03 PM
Subject: Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters
----- Original Message ----- From: "Scott Fisher"
<[EMAIL PROTECTED]>
You do need the Pro version to run more than one scanner.
It's the best thing about Virus Pro...
Also nice if you get a set of bad definitions or a scanner stops
working, the other scanners will cover.
With PRESCAN ON, Mcafee Virusscan catches some phish.
Clamav catches most phish.
Actually, you would need to have "PRESCAN OFF" in order to catch most
phish e-mails with Declude. Otherwise, Declude Virus PRESCANs all
messages and finds that most phish messages contain nothing worth
scanning and thus bypasses the virus scanners.
Bill
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
