[Mimedefang] uvscan - detecting virus name

Stefano McGhee SMcGhee at ARCweb.com
Wed Jun 11 11:32:00 EDT 2003


John,
	You'll only find them released between certain dat versions.  For
example, when the last Bugbear.b infestation began, there was an extra.dat
to detect it available rather quickly, but it goes away once the next real
version comes out, 4270 in this case.  So now, there is no extra.dat.  The
extra.dat is only a temporary fix, a patch of sorts, until NAI updates the
entire virus definition package.  I usually don't bother with them.  Since
I started with MIMEDefang, I end up dropping most new viruses before I can
identify them buy pitching all virulent prone file extensions like pif, scr
and vbs.  I only get the extra.dat file when I want to know what the name
of the new virus is so uvscan can identify them.  It looks nicer on the
graphdefang that way, too.

Hope that helps,

Stefano
> 
> 
> where are these extra.dat file(s)
> 
> I don't seem to find them in 
> http://download.nai.com/products/datfiles/4.x/nai/readme.txt 
> nor do they 
> seem to be in
> ftp://ftp.nai.com/virusdefs/4.x/  though there is an "extra" 
> directory, the 
> directory is empty.
> 
> i searched on google for the location of a uvscan extra.dat 
> file without 
> luck  :(
> 




More information about the MIMEDefang mailing list