From: davide b. <dav...@gm...> - 2005-10-23 17:30:50
|
Hi, now my snort-inline + clamav catch the virus....but the virus present i= n ftp://ftp.digitalfuture.it ,06.exe, isn't catch....it would be because it's 224 KB and stream4 don't reassemble all? who works stream4? Moreover for catch this virus my clamav needs the whole file, because it isn't catch by signature, but with algorithmic engine, and clamav must have the file like if it were by filesistem. Someone can halp me?? |