>
> I'm using stock clamav with freshclam, and getting 10-12 an hour in
> each maibox. So no, stock clamav does not catch these.
>
> --
> Jo Rhett


Hmmmmmm interesting

I was telling the same thing recently on this same thread.

YES, they do catch and quarantine them all them rotten buggers.

When I do my clamav, i roll my own rpm and use a spec file from crash-hat

http://crash.fce.vutbr.cz/crash-hat/5/clamav/

I used to just use his and re-roll yet I do not have time to wait when there
are clamav updates.

He (petr) does it differently than DAG as near as I can tell.

Maybe you can have time and can check out the particulars and if it will
help you.

I know we do not actively go snag the clamav extra sigs

Ummm, here is how we originally used to roll our own from someone elses...

http://qmail.jms1.net/clamav/rpm.shtml

again, now I just snag source and mod the .spec etc and do it that way...

- rh