Just kind of curious which "scam" this is targeting?
Pump and Dump stock?
Work at home?
419/Lottery scams?
----- Original Message -----
From: "Bill Landry" <[EMAIL PROTECTED]>
To: <declude.junkmail@declude.com>; <declude.virus@declude.com>
Sent: Monday, August 07, 2006 3:39 PM
Subject: [Declude.Virus] Fw: New ClamAV "scam" database
For anyone that is possibly running ClamAV for virus scanning, and is
already taking advantage of the added "phish" detection provided by Steve
Basford's phish.ndb, he has put together another database geared to
tagging "scam" e-mails, including those pesky image spams.
The new scam database is working great here, lots of catches so far and no
FPs yet. If you want to give it a run, please do heed Steve's request at
the end of this message about scripting the downloads for the new
scam.ndb, at least for now...
Thanks,
Bill
----- Original Message -----
From: "Steve Basford" <[EMAIL PROTECTED]>
To: "Bill Landry" <[EMAIL PROTECTED]>
Sent: Monday, August 07, 2006 12:51 PM
Subject: Re: scam database
Hi Bill,
Just to let you know I've done a big update to the scam database,
which isn't publicily known about yet but
it's working a treat this end, with a lot of those image spams :)
If you want to give a manual trial run:
http://www.sanesecurity.com/clamav/scam.ndb.gz
Cheers,
Steve
Bill Landry wrote:
Wow, Steve, this is working very well! Nice work. Do you mind if I
let others know about the availability of this new scam database?
That's great! It's working too, for me at work... and two other brave
"test" sites :)
Yep, you can let people know but...
Please could you ask people to only *manually* download the file for the
time being, no scripts, it'll only
get updated once a day at the moment, when I see a big new image spam
run:
Main Site: http://www.sanesecurity.com/clamav/
Scam Database: http://www.sanesecurity.com/clamav/scam.ndb.gz
Phishing Database: http://www.sanesecurity.com/clamav/phish.ndb.gz
Glad it's helping :)
Cheers,
Steve
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
