On Friday 19 September 2003 11:23 pm, W.D. McKinney wrote: > On Fri, 2003-09-19 at 13:51, Jesse Guardiani wrote: > > Kevin Hanser wrote: > > > Yes, I received a couple of these this morning, one with an attachment > > > called Update53.exe, and another w/an attachment called Install932.exe. > > > > > > I'm assuming this is the new "Swen" virus I have recently heard about? > > > > Yes, also Gibe-F apparently. But ClamAV's current virus def for > > Worm.Gibe.F seems to be faulty because it only catches about 50% of my > > Gibe-F viruses... > > Is there a good way to stop this with clamav ? We like it's implemtation > but this is not cool.
Looks like these are empty files with suspicious filenames. No viral content, hence not detected by ClamAV. If anyone has a non-zero-length example of Gibe.F (or Swen) which is not detected by ClamAV, please send me a copy. Regards, Antony. -- It's beautiful, man, beautiful. It's enough to make me merely hate BIND rather than loathe it with every fibre of my being. - David Cantrell ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
