[EMAIL PROTECTED] wrote: > There is an article on eWeek.com today concerning "instability" in AV > software due to the impossibility of adequately testing updates when > releasing them as quickly as they are needed > (www.eweek.com/article2/0,1895,2240656,00.asp?kc=EWKNLINF010208STR3). >
Just to force the point home, NcAfee yesterday released datfile 5197 yesterday which erroneously detected JS/Exploit-BO virus on sites like ESPN and Friendster. They've since released dat 5198 to fix the problem. The problem of false positives from bad patterns or heuristics is, IMHO, a good reason for never doing on-demand full scans of filesystems. Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
