RE: [Clamav-users] clamav only virus? - Trojan.Briss-1

2005-07-27 Thread Randal, Phil
Pablo Chamorro C. wrote:

  Try submitting the infected file to http://virusscan.jotti.org and 
  http://www.virustotal.com and see if any of their scanners 
 detect it.
 
 Thank for all the answers, I found that only clamav on July 
 12th included that signature, but now, where can I find 
 information about the associated risks?  I would like to 
 share that info with a workmate who only trust on propietary 
 antivirus (I think so).
 
 thanks,
 
 Pablo

Well, the advice I gave above still applies.  Those two online virus
scanners would reveal the name other vendors call that virus by, and the
appropriate searches of their sites would reveal the required
information.

This is basic research, easily done.

There's no point in us spoon feeding you the answers or you'll be asking
the same question with each new virus and not learning how to find the
anser for yourself.

Cheers,

Phil (who hates having to give the same answer twice to an elementary
question)


Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK
___
http://lurker.clamav.net/list/clamav-users.html


RE: [Clamav-users] clamav only virus? - Trojan.Briss-1

2005-07-27 Thread Pablo Chamorro C.

Well, the advice I gave above still applies.  Those two online virus
scanners would reveal the name other vendors call that virus by, and the


Yeah, I did that, thanks, but only clamav identified it as virus.


There's no point in us spoon feeding you the answers or you'll be asking
the same question with each new virus and not learning how to find the
anser for yourself.


Yeah, I know that when a virus has aliases I can read all the info on each 
website of the AV vendors, but my question was especific for clamav. 
What I know is clamav doesn't have a 'Virus Information Library' or 
similar, that is the reason why I'm asking.  I want to know how to do it 
with any virus, off course, not that you mail me the results.


Thanks,

Pablo


Cheers,


--
Tel: +57 (2) 7314752/3222/2595 - Fax: +57 (2) 7310514
Carrera 31 #18-07 Parque Infantil - PO Box 1795 - Pasto
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] clamav only virus? - Trojan.Briss-1

2005-07-27 Thread Matt Fretwell
Pablo Chamorro C. wrote:

 What I know is clamav doesn't have a 'Virus Information Library' or 
 similar, that is the reason why I'm asking.


 If you search the archives, there have been links to comparison lists
posted in the past.


Matt
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] clamav only virus? - Trojan.Briss-1

2005-07-26 Thread Daniel J McDonald
On Tue, 2005-07-26 at 08:52 -0500, Pablo Chamorro C. wrote:
 I installed clamwin under windows 2000 and it found a file infected with 
 Trojan.Briss-1 but looking up in 
 http://www.rainingfrogs.co.uk/index.orig.php?search=numvid=97961 I'm 
 noting that only clamav detect that virus.
 
 How can we know that virus is really a virus if any other antivirus 
 software know about trojan.briss-1? or am I wrong?

F-secure finds other variations on the briss family, so it's most likely
real.

-- 
Daniel J McDonald, CCIE # 2495, CNX, CISSP # 78281
Austin Energy

[EMAIL PROTECTED]

___
http://lurker.clamav.net/list/clamav-users.html


RE: [Clamav-users] clamav only virus? - Trojan.Briss-1

2005-07-26 Thread Randal, Phil
Pablo Chamorro C. said
 
 I installed clamwin under windows 2000 and it found a file 
 infected with Trojan.Briss-1 but looking up in
 http://www.rainingfrogs.co.uk/index.orig.php?search=numvid=97961
 I'm noting that only clamav detect that virus.
 
 How can we know that virus is really a virus if any other 
 antivirus software know about trojan.briss-1? or am I wrong?

Try submitting the infected file to http://virusscan.jotti.org and
http://www.virustotal.com and see if any of their scanners detect it.

Other vendors may well use different names.

Cheers,

Phil


Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] clamav only virus? - Trojan.Briss-1

2005-07-26 Thread Daniel J McDonald
On Tue, 2005-07-26 at 08:52 -0500, Pablo Chamorro C. wrote:
 I installed clamwin under windows 2000 and it found a file infected with 
 Trojan.Briss-1 but looking up in 
 http://www.rainingfrogs.co.uk/index.orig.php?search=numvid=97961 I'm 
 noting that only clamav detect that virus.
 
 How can we know that virus is really a virus if any other antivirus 
 software know about trojan.briss-1? or am I wrong?

the Clamav team found somefool (aka netsky) hours before anyone else,
ditto for the SCO.A one, and many others.  Maybe nobody else has as good
of virus traps as the clamav team.

-- 
Daniel J McDonald, CCIE # 2495, CNX, CISSP # 78281
Austin Energy

[EMAIL PROTECTED]

___
http://lurker.clamav.net/list/clamav-users.html


RE: [Clamav-users] clamav only virus? - Trojan.Briss-1

2005-07-26 Thread Pablo Chamorro C.

Try submitting the infected file to http://virusscan.jotti.org and
http://www.virustotal.com and see if any of their scanners detect it.


Thank for all the answers, I found that only clamav on July 12th included 
that signature, but now, where can I find information about the associated 
risks?  I would like to share that info with a workmate who only trust on 
propietary antivirus (I think so).


thanks,

Pablo



Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK
___
http://lurker.clamav.net/list/clamav-users.html



--
___
http://lurker.clamav.net/list/clamav-users.html