> Do you realize that no antivirus can provide a signature until : > - someone has witnessed an infection (or infection attempt), > - reported it to the virus db maintainers, > - the signature has been engineered > - tested (no obvious false positives), > - then finally publicly released ? > > No matter how often you check for new sigs, you'll always have at least > several hours between a new worm hits the Net and a signature comes to > your local antivirus installation. > > IMHO to the question : "What do I do ?" the most logical answer is : > "explain to your users what a new virus is and how it is impossible to > protect against them in the early hours no matter how much effort the > antivirus guys put to the task". Then advise them to use more secure > e-mail clients...
What about companies that are purporting and actually selling appliances or applications that claim to stop viruses as they break out based on heauristics and/or pattern matching? Are they just blowing smoke? ------------------------------------------------------- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
