[Avcheck] infected script and KAV fakers list

Piotr KUCHARSKI chopin at sgh.waw.pl
Tue Feb 24 18:58:02 MSK 2004


On Fri, Feb 20, 2004 at 08:32:43PM +0100, Velimir Kalik wrote:
> Does anyone know of a better fakers list or a site where fakers list is
> updated (preferably for KAV since I use postfix+avcheck+Kaspersky)? 

AV vendors should return codes indicating virus is faking, so we
could use it. I've even written an I-D about that ;-)
I wrote once to drweb team about that, but no answer. :(

> FAKERS="(klez|tanatos|bugbear|sobig|ganda|novarg|mydoom|moodown)"

At least add netsky.

p.

-- 
Beware of he who would deny you access to information, for in his
heart he dreams himself your master.   -- Commissioner Pravin Lal
http://nerdquiz.sgh.waw.pl/  -- polska wersja quizu dla nerdów ;)


More information about the Avcheck mailing list