On Monday 29 September 2003 10:39, Adrian Pircalabu wrote:
> Am instalat si eu clamav pe un FreeBSD/qmail dar nu am avut
> posibilitatea sa-l testez intensiv. Cam ce rata de detectie are? Ma
> intereseaza si ultimele noutati, gen w32.swen, blaster, sobig. Cam la
> ce perioada dupa aparitia lor ii detecteaza?
> Mersi
tealc:/var/log# grep -i sobig maillog*
[...]
maillog.4:Sep 6 17:05:31 tealc exim[18116]: [25\26] X-Infected: Worm.
Sobig.F
[...]
Celelalte doua nu le-am gasit. Decat unul, in db-urile lui:
tealc:/opt/other/share/clamav# grep sobig -i *
viruses.db:Worm.Sobig.A (Clam)
=6fec40cb4ad432859b126508015369262a47554a451edfaae
437057ac6d6683e4a187189b7daf883e3768a107b1f263cbf2dfaeef372e9258f2ded8943fe63fd5
dbd6a317ce6f8953634874247aab83228a5caf585c1d3823cc123678823552d71af200b
viruses.db:Worm.Sobig.C (Clam)
=4d634db72010b7f5d8088dd1bda766618cc33b0daef8077c4
791da11a304c16ad9c1dbe2f05b37
viruses.db:Worm.Sobig.D (Clam)
=3435e952375735778885041da07ff26f1597ce002e0c2a2e2
a00783a5cd9903c4b2f46a2a10fe7dfbf0f46726f6d282c0d
viruses.db:Worm.Sobig.E (Clam)
=de4be24b9cafafcbf8b7cdcf15f00c27a0de807f22f1d2c9b
42e86e096aad66fca75ccd3d2022a8afc95f6a598959f23dc662a100786f15a885f77f778fd75fa6
ce8d64b309b3cd5a7281ef952805f08dd5e6a842253cc8f33eac9cdfbf92557ee860e4f0f17c26f0
26b59b9b8559aa74e08b82f62e9151f40070da9f11b
viruses.db:Worm.Sobig.F (Clam)
=3cdf78d10cf4ca79c503a8ca1c8fb0df57868abae75470ca2
7f24e3bc701bcc775ab8b2389147d5205593a629610da5a62
viruses.db2:Worm.Sobig.F (Clam)
=b291c7ffba0cab7edbdc3beaec457668b6d329ff48de2b3b
7f363728bb17361d7a2ecb919199b66a879e22b070edf2c812c7fa37508409e2795ae8c052e403e4
6a
tealc:/opt/other/share/clamav# grep blaster -i *
viruses.db:Worm.Blaster.A (Clam)
=2077616e04edffffff746f20736179204c4f564520594f5
52053414e21210062696c6c14fdb76dfb67617465732668096425
viruses.db:Worm.Blaster.B (Clam)
=3c31088380853f01c77465106b696473772e7978e04df26
33d726ff21e6674200e616e9e5f759e6b4f6d79866c6523df4efa9c69211d423f7ff84768
viruses.db:Worm.Blaster.C (Clam)
=52fd5f403040003c3140000080aeffff3f1570656e69733
3322e6578650049206a757374207761ffffffff6e7420746f20736179204c4f56452059
viruses.db:Worm.Blaster.D (Clam)
=de131cd0f3ff444c4c484f53542e4558459a14f9eebd854
95438530b5061
Perioada de detectie de la aparitie depinde de cand intra semnaturile in
db-urile publice... Eu, cum am mai spus, iau db-urile automat in
fiecare saptamana.
--
Claudiu Cismaru
GPG Key: http://maya.cnixs.com/~claudiu/claudiu.gpg
---
Detalii despre listele noastre de mail: http://www.lug.ro/
