>Is there a way to tell ClamAV or ASSP to reject even suspicious files?
ClamAV only detects OK and FAILED (+ result string) - the result is
processes by assp.
'vsValencePB'
RTMF:
'SuspiciousVirus' .... It is possible to weight such results. .....
Thomas
Von: K Post <[email protected]>
An: ASSP development mailing list <[email protected]>
Datum: 12.03.2016 20:16
Betreff: [Assp-test] Attachment blocking and ClamAV suspicious only
2 questions:
1) I've been doing some ClamAV testing. It mostly works, but I've also
seen:
[VIRUS][scoring] 149.202.232.193 <[email protected]>
to:
[email protected] 'Eicar-Test-Signature' passing the virus check
because of only suspicious virus 'Eicar'
Is there a way to tell ClamAV or ASSP to reject even suspicious files?
2) I've got Level 1 blocking set using
exe-bin|url|ade|adp|asx|bas|bat|dot|dotx|xlt|xlts|bin|chm|cmd|com|cpl|crt|dbx|dll|exe|hlp|hta|htb|inf|ifs|isp|js|jse|lnk|mda|mdb|mde|mdz|mht|msc|msi|msp|mst|nch|pcd|pif|prf|ps1|reg|scf|scr|sct|shb|shs|vb|vbe|vbs|vba|wms|wsc|wsh
Everything I've tested is blocked with the exception of DLL files and I
can't for the life of me figure out why. Any ideas?
Thanks
Ken
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785111&iu=/4140
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785111&iu=/4140
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
