ClamAV - foxhole databases blokada exe v zipu ?
 
1qay1qay 24. okt 2014 15:27:35 Pridružen od:
12. avg 2010
2967 objav
2430 194 84
#1

Ali ima kdo izkušnje (dobre ali slabe) z uporabo dodatnih podpisov za ClamAV ?



Sprašujem, ker ne najdem nobenega drugega načina, da bi blokiral exe (in ostale z payloadom) fajle ki so v priponki - zip-u ?



http://sanesecurity.com/foxhole-databases/

"The three new foxhole databases use the .cdb extension which uses the ClamAV engine to look inside certain container/archive files for various filenames/extensions and perform Regular Expressions, on those filenames/extensions."



Hvala za vsako idejo !


všeč(0) ni všeč(0) spam(0)
Delko www.delko.si [Moto akumulatorji] | [Polnilne baterije] | [GP baterije]
 
 

🔒 Za odgovor na to temo se moraš prijaviti.

Prijavi se