[Clamav-users] MyDoom.D - manual signature generation?

2004-02-11 Thread Kevin M. Myer
Hello, The ClamAV team did a great job of getting the signature out for MyDoom.A (SCO.A) virus well before the commercial vendors had signatures. However, yesterday, we started receiving what turns out to be MyDoom.D messages. I submitted a sample at about 9:00AM EST, on 2/10/2004 but am still

RE: [Clamav-users] MyDoom.D - manual signature generation?

2004-02-11 Thread Eric . Emerson
Title: RE: [Clamav-users] MyDoom.D - manual signature generation? Check this out...I've done it a bunch of times. It works so good I've been thinking about offering to help generate sigs for the group. http://www.clamav.net/doc/signatures.pdf http://www.clamav.net/faq.html FAQ#10

RE: [Clamav-users] MyDoom.D - manual signature generation?

2004-02-11 Thread Kevin M. Myer
Thanks Eric, Thats exactly what I was looking for. I guess it helps to RTM when in doubt... One question - in building the final CVD, it mentions a signing server. Since I'm not planning on distributing my temporary signature, what do I use for a signing server, since I presumably don't have

Re: [Clamav-users] MyDoom.D - manual signature generation?

2004-02-11 Thread Tomasz Papszun
On Wed, 11 Feb 2004 at 8:43:41 -0500, Kevin M. Myer wrote: Hello, The ClamAV team did a great job of getting the signature out for MyDoom.A (SCO.A) virus well before the commercial vendors had signatures. However, yesterday, we started receiving what turns out to be MyDoom.D messages. I

Re: [Clamav-users] MyDoom.D - manual signature generation?

2004-02-11 Thread Antony Stone
On Wednesday 11 February 2004 2:31 pm, Kevin M. Myer wrote: Thanks Eric, Thats exactly what I was looking for. I guess it helps to RTM when in doubt... One question - in building the final CVD, it mentions a signing server. Since I'm not planning on distributing my temporary signature,

RE: [Clamav-users] MyDoom.D - manual signature generation?

2004-02-11 Thread Diego d'Ambra
-Original Message- From: [EMAIL PROTECTED] [mailto:clamav-users- [EMAIL PROTECTED] On Behalf Of Kevin M. Myer Sent: 11. februar 2004 15:32 To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [Clamav-users] MyDoom.D - manual signature generation? Thanks Eric, Thats exactly

Re: [Clamav-users] MyDoom.D - manual signature generation?

2004-02-11 Thread David A. Lee
I tried using this attachment and it causes my clamscan to report Malformed Database On Wed, 11 Feb 2004 at 8:43:41 -0500, Kevin M. Myer wrote: Hello, The ClamAV team did a great job of getting the signature out for MyDoom.A (SCO.A) virus well before the commercial vendors had

Re: [Clamav-users] MyDoom.D - manual signature generation?

2004-02-11 Thread Kristof Hardy
David A. Lee wrote: I tried using this attachment and it causes my clamscan to report Malformed Database As a quick, temporary fix, you can use the attached file, containing the Works fine here. I copied the contents into my clipboard and created a new file with vi while logged into my linux.

Re: [Clamav-users] MyDoom.D - manual signature generation?

2004-02-11 Thread Kevin M. Myer
Zap the DOS line-ending and it should work. -- Kevin M. Myer Systems Administrator Lancaster-Lebanon Intermediate Unit 13 (717) 560-6140 --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps Web services for Linux

Re: [Clamav-users] MyDoom.D - manual signature generation?

2004-02-11 Thread David A. Lee
That did it ! Ya ! Zap the DOS line-ending and it should work. -- Kevin M. Myer Systems Administrator Lancaster-Lebanon Intermediate Unit 13 (717) 560-6140 --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and

Re: [Clamav-users] MyDoom.D - manual signature generation?

2004-02-11 Thread Kevin M. Myer
Tomasz, No need to apologize for the delay. I just needed some education as to how to add signatures temporarily. Computer Associates is the only commercial vendor I can find that detects MyDoom.D at the moment. Also, thanks to those who responded from the list - I'm better equipped to handle