Babu.N wrote: > Hi, > As soon as clamAV team is aware of a virus outbreak, is it possible > to publish an update which contains: whether a virus update is > impending, Virus risk level( low, medium, high), Risk description. In > the same way freshclam listens for signature updates from clam data > center, it can listen for this new information too.
Hi Babu, Collecting such info would require more time than publishing the signature itself. Under certain circumstances you'll notice that a new signature is pushed out ASAP, since stopping the threat is our very first priority. Later on, as the analysis is completed and/or the malware evolves, more signatures could be added or the originary signature could be replaced. > Such a feature helps administrators to atleast mitigate the zero-hour viruses. Zero-hour protection is really beyond the scope of an AV toolkit. The only thing we can do is to try to minimize the exposure window as much as possible. > ******************************************************************************** > This email message (including any attachments) is for the sole use of the > intended recipient(s) > and may contain confidential, proprietary and privileged information. Any > unauthorized review, > use, disclosure or distribution is prohibited. If you are not the intended > recipient, > please immediately notify the sender by reply email and destroy all copies of > the original message. > Thank you. This is a publicly accessible mailing list... -aCaB _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net
