Re: [Clamav-users] Sanesecurity: new database

2008-08-18 Thread René Berber
Steve Basford wrote: The new Rogue signature database contains hashes of known Rogue Anti-Virus software and also contains known Fake Videos/Codecs. Most of these files are currently being distributed via the current wave of fake CNN/Msnbc/BBC news and fake video emails (54 signatures

Re: [Clamav-users] Sanesecurity: new database

2008-08-18 Thread Tomasz Kojm
On Mon, 18 Aug 2008 04:45:58 -0500 René Berber [EMAIL PROTECTED] wrote: Steve Basford wrote: The new Rogue signature database contains hashes of known Rogue Anti-Virus software and also contains known Fake Videos/Codecs. Most of these files are currently being distributed via the

Re: [Clamav-users] Sanesecurity: new database

2008-08-18 Thread Steve Basford
On Mon, 18 Aug 2008 04:45:58 -0500 libclamav is right, the entry at the line 53 in rogue.hdb is incorrect (double colon before the virus name) Fixed... Thanks Tomasz... ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [Clamav-users] Sanesecurity: new database

2008-08-18 Thread Dennis Peterson
Tomasz Kojm wrote: libclamav is right, the entry at the line 53 in rogue.hdb is incorrect (double colon before the virus name) Interesting that clamscan -d rogue.hdb didn't catch that, but the error also didn't cause clamd to die nor even fail to find viruses. dp

Re: [Clamav-users] Sanesecurity: new database

2008-08-18 Thread Tomasz Kojm
On Mon, 18 Aug 2008 08:09:18 -0700 Dennis Peterson [EMAIL PROTECTED] wrote: Tomasz Kojm wrote: libclamav is right, the entry at the line 53 in rogue.hdb is incorrect (double colon before the virus name) Interesting that clamscan -d rogue.hdb didn't catch that, but the error also

Re: [Clamav-users] Sanesecurity: new database

2008-08-18 Thread Dennis Peterson
Tomasz Kojm wrote: On Mon, 18 Aug 2008 08:09:18 -0700 Dennis Peterson [EMAIL PROTECTED] wrote: Tomasz Kojm wrote: libclamav is right, the entry at the line 53 in rogue.hdb is incorrect (double colon before the virus name) Interesting that clamscan -d rogue.hdb didn't catch that, but the

[Clamav-users] Sanesecurity: new database

2008-08-15 Thread Steve Basford
Hi All, Just a few items of news The new Rogue signature database contains hashes of known Rogue Anti-Virus software and also contains known Fake Videos/Codecs. Most of these files are currently being distributed via the current wave of fake CNN/Msnbc/BBC news and fake video emails (54