Re: [Clamav-users] Spyware detection...

2005-09-12 Thread Joanna Roman
--- Thomas Hruska [EMAIL PROTECTED] wrote: Dennis Peterson wrote: Meanwhile, why don't you create signatures for known spyware and place them in your configuration? ClamAV allows this, you know. If you get good at it you can share them. dp Actually I didn't know that. I was

[Clamav-users] Submitting malware (long)...

2005-09-12 Thread Wilbur Sims
Recently been collecting a lot of various malware through the use of a couple of new honeypots. I've been trying to submit via the webform, but I've never seen any confirmation that they were accepted or rejected through monitoring of the clamav-virusdb list. Basically I just want to know if I

RE: [Clamav-users] Spyware detection...

2005-09-12 Thread ANONYMOUS
I think what you're looking for is Spybot Search Destroy. Google it because I forgot the exact URL. And it's completely free. ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Spyware detection...

2005-09-12 Thread Stephen J. Smoogen
On 9/11/05, Thomas Hruska [EMAIL PROTECTED] wrote: Thank you but I already know the tool doesn't exist or I wouldn't be wandering around this forum. Since the tool doesn't exist, I found the _closest_ possible tool to the tool I am looking for and ClamAV happens to be that tool. You should

Re: [Clamav-users] Spyware detection...

2005-09-12 Thread Christopher X. Candreva
On Mon, 12 Sep 2005, Stephen J. Smoogen wrote: I am currently looking at doing the same thing. I have a set of boxes that I am planning to 'infect' with spyware and then start making signatures for them. It is a rather slow process at the moment.. There doesn't seem to be any reason a

Re: [Clamav-users] Submitting malware (long)...

2005-09-12 Thread Tomasz Papszun
On Mon, 12 Sep 2005 at 11:04:11 -0400, Wilbur Sims wrote: Recently been collecting a lot of various malware through the use of a couple of new honeypots. Good idea. I've been trying to submit via the webform, but I've never seen any confirmation that they were accepted or rejected through

[Clamav-users] To Wilbur Sims (collection malware using honeyports)

2005-09-12 Thread Joanna Roman
--- Tomasz Papszun [EMAIL PROTECTED] wrote: On Mon, 12 Sep 2005 at 11:04:11 -0400, Wilbur Sims wrote: Recently been collecting a lot of various malware through the use of a couple of new honeypots. Good idea. Hi Wilbur Sims, Can you share with us how you collect those malwares ?

[Clamav-users] Keeping Trend Micro and Symantec fed

2005-09-12 Thread D.J. Fan
Thanks again ClamAV developers and maintainers. Today will be the fourth time I submit a virus caught by ClamAV and missed by both Trend Micro and Symantec to them. Obviously yet another new Bagle variant caught by an older ClamAV signature: A virus was found: Worm.Bagle.BB-gen A banned name

RE: [Clamav-users] Keeping Trend Micro and Symantec fed

2005-09-12 Thread D.J. Fan
Thanks again ClamAV developers and maintainers. Today will be the fourth time I submit a virus caught by ClamAV and missed by both Trend Micro and Symantec to them. Obviously yet another new Bagle variant caught by an older ClamAV signature: A virus was found: Worm.Bagle.BB-gen A banned name

Re: [Clamav-users] Keeping Trend Micro and Symantec fed

2005-09-12 Thread Vernon A. Fort
D.J. Fan wrote: Thanks again ClamAV developers and maintainers. Today will be the fourth time I submit a virus caught by ClamAV and missed by both Trend Micro and Symantec to them. Obviously yet another new Bagle variant caught by an older ClamAV signature: A virus was found:

Re: [Clamav-users] Spyware detection...

2005-09-12 Thread Dennis Peterson
--- Thomas Hruska [EMAIL PROTECTED] wrote: Aren't there already spyware signatures in ClamAV database ?