Yes, these rules will go into the rulebase files under the malware group. There are a number of reasons we're thinking about being more aggressive:
* Some systems do not have server based virus scanning. * We *may* be able to respond more quickly than some anti-virus companies. * We service many different systems - not just Declude/IMail. * Non-viable versions of viruses can often be caught to reduce loads. * Virus hoaxes will be caught by Message Sniffer but not most AV software. * Every little bit helps. That's the thinking... _M |-----Original Message----- |From: [EMAIL PROTECTED] |[mailto:[EMAIL PROTECTED] On Behalf Of Todd Holt |Sent: Friday, September 12, 2003 2:05 PM |To: [EMAIL PROTECTED] |Subject: RE: [Declude.Virus] OT - Alert lists. | | |Will this be incorporated into our rulebase files? If so, |shouldn't the virus scanner have found the virus before the |sniffer gets to scan it? | |Todd Holt |Xidix Technologies, Inc |Las Vegas, NV USA |www.xidix.com | | |> -----Original Message----- |> From: [EMAIL PROTECTED] [mailto:Declude.Virus- |> [EMAIL PROTECTED] On Behalf Of Pete - Madscientist |> Sent: Friday, September 12, 2003 10:41 AM |> To: [EMAIL PROTECTED] |> Subject: [Declude.Virus] OT - Alert lists. |> |> We're thinking of augmenting our service by aggressively pursuing |email |> born malware. |> |> What lists everyone thinks are best for up-to-date alerts on new |> outbreaks & their details. |> |> Thanks, |> _M |> |> Pete McNeil (Madscientist) |> President, MicroNeil Research Corporation |> Chief SortMonster, www.SortMonster.com |> VOX: 703-406-2016 |> FAX: 703-406-2017 |> |> --- |> [This E-mail was scanned for viruses by Declude Virus |> (http://www.declude.com)] |> |> --- |> This E-mail came from the Declude.Virus mailing list. To |unsubscribe, |> just send an E-mail to [EMAIL PROTECTED], and |> type "unsubscribe Declude.Virus". The archives can be found |> at http://www.mail-archive.com. |> --- |> [This E-mail scanned for viruses by Declude Virus |> (http://www.declude.com)] | | |--- |[This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
