Re: [Clamav-users] PUAs

2008-09-15 Thread Tilman Schmidt
On 11.09.2008 16:52, Ian Eiloart wrote: Now, having done that, I'm thinking PUA could be VERY useful. In fact, I've been considering banning outright the passing of executable files in archives - too many bits of malware are slipping through the net at the moment. I don't quite see the

Re: [Clamav-users] PUAs

2008-09-15 Thread Sarocet
Tilman Schmidt wrote: Sub-Type: IRC Description: IRC server based programs/malware I don't use IRC myself, but respectable people keep telling me that it's not for bad guys only, there are legitimate uses for it, and I should try it myself to see. So I am a bit reluctant to declare all IRC

Re: [Clamav-users] PUAs

2008-09-11 Thread Tilman Schmidt
On 05.09.2008 20:38, [EMAIL PROTECTED] wrote: On Fri, 5 Sep 2008, Ian Eiloart wrote: I'm looking for some documentation on PUAs, but can only find a very terse list of the categories, at http://www.clamav.net/support/pua: RC NetTool Packed PwTool RAT Script Server Spy Tool But what do any of

Re: [Clamav-users] PUAs

2008-09-11 Thread Steve Basford
Could anyone knowledgeable comment? I've knocked something quickly together, it won't be 100% accurate and is very vague, but it might give you a few pointers: Vague Outline - PUA is a potentially unwanted application Sub-Type: RAT is Remote Access Trojans Description: tools used

Re: [Clamav-users] PUAs

2008-09-11 Thread Tilman Schmidt
Steve Basford wrote: I've knocked something quickly together, it won't be 100% accurate and is very vague, but it might give you a few pointers: Thanks a lot, that's very helpful already. Perhaps this could be put on the Wiki, and over time, expanded. -- Tilman Schmidt Phoenix Software GmbH

Re: [Clamav-users] PUAs

2008-09-11 Thread Ian Eiloart
--On 11 September 2008 13:22:25 +0100 Steve Basford [EMAIL PROTECTED] wrote: Could anyone knowledgeable comment? I've knocked something quickly together, it won't be 100% accurate and is very vague, but it might give you a few pointers: Thanks Steve. That's very helpful. I've put the list

Re: [Clamav-users] PUAs

2008-09-11 Thread Kelson
Ian Eiloart wrote: Anyway, can anyone think of a reason why anyone on a University Campus would (a) have a need to transfer files in any category below, Absolutely. A lot of those categories (and examples) cover tools with legit systems administration and/or troubleshooting uses. You just

Re: [Clamav-users] PUAs

2008-09-11 Thread Luca Gibelli
Hello Ian, BTW, any chance that we could get a link to Configuration Tips from the main wiki page, please? An essential part of getting ClamAV running on a live mail service is getting the configuration right. done, -- Luca Gibelli (luca _at_ clamav.net) ClamAV, a GPL anti-virus

[Clamav-users] PUAs

2008-09-05 Thread Ian Eiloart
Hi, I'm looking for some documentation on PUAs, but can only find a very terse list of the categories, at http://www.clamav.net/support/pua: RC NetTool Packed PwTool RAT Script Server Spy Tool But what do any of these categories mean? What sort of applications are listed? -- Ian Eiloart IT

Re: [Clamav-users] PUAs

2008-09-05 Thread clamav
On Fri, 5 Sep 2008, Ian Eiloart wrote: Hi, I'm looking for some documentation on PUAs, but can only find a very terse list of the categories, at http://www.clamav.net/support/pua: RC NetTool Packed PwTool RAT Script Server Spy Tool But what do any of these categories mean? What