[clamav-users] Clamav capabilities detecting malicious scripts (javascript, sql injection)

[Reindl Harald]

Am 20.11.2017 um 15:48 schrieb Peter Geerts:
> Perhaps this has been raised earlier but as a newbie I have a question
> regarding Clamav capabilities in this area.
> 
> We currently already run a 99.2 version on Red Hat which does a lot of
> virus checking already but malicious (script) code is not detected.
> 
> If this is at all possible I would like to receive pointers on how to
> configure this , if not we will have to look at another product most likely

there is no single yes/no answer because it all depends on your usecase 
- a inbound mailserver using clamd for scoring combined with 
SpamAssassin has different filters than a unconditional clamav-milter or 
clamav running on a workstation

in any case without http://sanesecurity.com/ clamav has poor rates at 
all but you need to consider wisely which signatures macth your usecase