[Clamav-users] Re: [Clamav-virusdb] Update (daily: 165)

2004-03-05 Thread Virgo Prna
On Fri, 5 Mar 2004 01:55:17 +0100, Tomasz Papszun wrote:
 On Thu, 04 Mar 2004 at 19:14:32 -0500, Tim B wrote:
 
 Does this mean that 0.67 will now detect the the encrypted versions 
 regardless of password?  
 
 Yes.
 

 But it's still usable only with full message scan?

-- 
Virgo Pärna 
[EMAIL PROTECTED]



---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Re: [Clamav-virusdb] Update (daily: 165)

2004-03-05 Thread Trog
On Fri, 2004-03-05 at 08:15, Virgo Pärna wrote:
 On Fri, 5 Mar 2004 01:55:17 +0100, Tomasz Papszun wrote:
  On Thu, 04 Mar 2004 at 19:14:32 -0500, Tim B wrote:
  
  Does this mean that 0.67 will now detect the the encrypted versions 
  regardless of password?  
  
  Yes.
  
 
  But it's still usable only with full message scan?

No, it'll match with just the encrypted zip file.

-trog



signature.asc
Description: This is a digitally signed message part


[Clamav-users] Re: [Clamav-virusdb] Update (daily: 165)

2004-03-05 Thread Virgo Prna
On Fri, 05 Mar 2004 08:38:48 +, Trog [EMAIL PROTECTED] wrote:
 
 No, it'll match with just the encrypted zip file.
 

 Right, disable-archive seems to do the magic...:)

-- 
Virgo Pärna 
[EMAIL PROTECTED]



---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] Re: [Clamav-virusdb] Update (daily: 165)

2004-03-05 Thread Derrick 'dman' Hudson
On Fri, Mar 05, 2004 at 08:38:48AM +, Trog wrote:
| On Fri, 2004-03-05 at 08:15, Virgo Prna wrote:
|  On Fri, 5 Mar 2004 01:55:17 +0100, Tomasz Papszun wrote:
|   On Thu, 04 Mar 2004 at 19:14:32 -0500, Tim B wrote:
|   
|   Does this mean that 0.67 will now detect the the encrypted versions 
|   regardless of password?  
|   
|   Yes.
|  
|   But it's still usable only with full message scan?
| 
| No, it'll match with just the encrypted zip file.

Nice.  It actually works, too.  (a coworker had a copy he received, so
I tested it with that)

-D

-- 
He is no fool who gives up what he cannot keep to gain what he cannot lose.
--Jim Elliot
 
www: http://dman13.dyndns.org/~dman/jabber: [EMAIL PROTECTED]


signature.asc
Description: Digital signature


[Clamav-users] Re: [Clamav-virusdb] Update (daily: 165)

2004-03-04 Thread Tim B
Diego d'Ambra wrote:

ClamAV databases updated (04-mar-2004 13:11 GMT): daily.cvd, viruses.db2
version: 165
Submission: n/a
Sender: Diego d'Ambra
Virus name: Worm.Bagle.Gen-zippwd
Notes: Generic signature to detect password-protected Bagle zip files
Notes: Signature by Trog
Added: Yes
Does this mean that 0.67 will now detect the the encrypted versions 
regardless of password?  In otherwords, I don't have to switch to cvs 
version to detect these?



---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] Re: [Clamav-virusdb] Update (daily: 165)

2004-03-04 Thread Tomasz Papszun
On Thu, 04 Mar 2004 at 19:14:32 -0500, Tim B wrote:
 Diego d'Ambra wrote:
 
 ClamAV databases updated (04-mar-2004 13:11 GMT): daily.cvd, viruses.db2
 version: 165
 
 Submission: n/a
 Sender: Diego d'Ambra
 Virus name: Worm.Bagle.Gen-zippwd
 Notes: Generic signature to detect password-protected Bagle zip files
 Notes: Signature by Trog
 Added: Yes
 
 Does this mean that 0.67 will now detect the the encrypted versions 
 regardless of password?  

Yes.

 In otherwords, I don't have to switch to cvs version to detect these?

You haven't.

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 [EMAIL PROTECTED]   http://www.lodz.tpsa.pl/   | ones and zeros.
 [EMAIL PROTECTED]   http://www.ClamAV.net/   A GPL virus scanner


---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470alloc_id=3638op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users