Logout

Alt-N Discussion Groups > MDaemon Discussion Groups > MDaemon Anti-virus Plug-in > Automated virus sample submissions idea

 [F] Alt-N Discussion Groups  / MDaemon Discussion Groups  / MDaemon Anti-virus Plug-in  /

Automated virus sample submissions idea

[Cramp, Edmund]
Edmund Cramp
Novice
Novice
Posts: 233

MDaemon
Outlook Connector
WebAdmin
Edmund Cramp - 09:16am, Dec 9 2020

I maintain a nice collection of honeypot addresses - these are very useful because when I see a potential virus sent to both a real address and a honeypot address I can just delete them both.
Maybe MD could have the option to automatically forward copies of incoming honeypot infections to the virus detection companies?

  (older msg: 18)All MessagesOldest ItemsOlder ItemsNewer ItemsNewest Items

Arron Caruth - May 26, 2021 8:05 am (#19 Total: 21)  

Guest User  

Photo of Author
Posts: 1
Hi Edmund,
 
The virus detected counter is not incremented when the mailbox scan detects a virus.  I've added this to the wishlist.
 
Thanks!
 
--
Arron Caruth
Vice President of Product Development
o: 817-601-3222    e: Arron.Caruth@mdaemon.com

MDaemon Technologies
Simple Secure Email
Visit us on www.mdaemon.com | Facebook | LinkedIn | YouTube
Sent using the MDaemon Email Server
 
On Tue, 25 May 2021 11:11:39 -0500, "lists-md-anti-virus@mdaemon.com (Edmund Cramp)" <lists-md-anti-virus@mdaemon.com> wrote:
Thanks for the explanation - certainly the malware creators are building new versions all the time so this is not surprising, Seeing the details in the quarantined message illustrates that MD is enabling me to stop everything and doing a great job.

It looks like when the internal AV scans find a virus after the AV update, the "Viruses detected" counts are not updated, when I turned on the "Refuse all Viruses" feature it helped a lot but I never seen "Viruses detected" counts recording anything. This is not a big deal but it's helpful to see how much we are being attacked.
 
View/reply at Automated virus sample submissions idea
--MD-AV-PLUGIN-------------------------------------------------------
This list is for questions and discussion about AntiVirus plugins for
MDAEMON. To unsubscribe from this mailing list send an email to 
md-av-plugin-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!------------------------------------------------

---------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user 
support and discussion.  MDaemon staff members may participate in the 
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical 
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
---------------------------------------------------------------------

--MD-AV-PLUGIN-------------------------------------------------------
This list is for questions and discussion about AntiVirus plugins for
MDAEMON. To unsubscribe from this mailing list send an email to
md-av-plugin-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!------------------------------------------------

---------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion.  MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
---------------------------------------------------------------------

Arron Caruth - May 26, 2021 10:41 am (#20 Total: 21)  

Guest User  

Photo of Author
Posts: 1
 
We'll take a look at it.  Off the top of my head, one concern is that just because a user submits a message as a false negative, doesn't mean it actually is a false negative. 
 
--
Arron Caruth
Vice President of Product Development
o: 817-601-3222    e: Arron.Caruth@mdaemon.com

MDaemon Technologies
Simple Secure Email
Visit us on www.mdaemon.com | Facebook | LinkedIn | YouTube
Sent using the MDaemon Email Server
 
On Wed, 26 May 2021 07:05:47 -0500, "lists-md-anti-virus@mdaemon.com (Edmund Cramp)" <lists-md-anti-virus@mdaemon.com> wrote:
Just an idea - maybe when a user sends you a "Report to MDaemon as Virus False Negative" the "Viruses Detected" count could be updated so that users would have some record of what's happening.
 
View/reply at Automated virus sample submissions idea
--MD-AV-PLUGIN-------------------------------------------------------
This list is for questions and discussion about AntiVirus plugins for
MDAEMON. To unsubscribe from this mailing list send an email to 
md-av-plugin-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!------------------------------------------------

---------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user 
support and discussion.  MDaemon staff members may participate in the 
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical 
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
---------------------------------------------------------------------

--MD-AV-PLUGIN-------------------------------------------------------
This list is for questions and discussion about AntiVirus plugins for
MDAEMON. To unsubscribe from this mailing list send an email to
md-av-plugin-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!------------------------------------------------

---------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion.  MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
---------------------------------------------------------------------

Edmund Cramp - May 26, 2021 10:58 am (#21 Total: 21)  

 

Photo of Author
Edmund Cramp
Novice
Novice
Posts: 233

MDaemon
Outlook Connector
WebAdmin
I agree, my quick test is simply to open Gmail and attach the .msg file - if Google says it contains a virus then I send it to you, otherwise I just delete it - I don't assume that the test is 100% accurate but it does work quickly. VirusTotal is a confident test but a typical new virus only gets flags a few times. I'm very happy with the MD AV solution, I'm just trying to keep an awareness of the current attack efforts - for example it's very nice to see the dynamic screening connections refused counts every day.



  All MessagesOldest ItemsOlder ItemsNewer ItemsNewest Items



 Content:

Read New | Search

 Guest:

Email to Admin



You are visiting as a Guest user.