Re: [Clamav-users] Is this a bug with virus database or updatescripts ???
--- Tomasz Papszun [EMAIL PROTECTED] wrote: On Fri, 01 Apr 2005 at 9:32:36 -0800, Joanna Roman wrote: Le vendredi 1 Avril 2005 00:50, Joanna Roman a crit : I noticed that a lot of virus sigs are not available in the virus database. For example, I tried to search in the virus database (http://clamav-du.securesites.net/cgi-bin/clamgrok) for HTML.Phishing.Bank-156, which is in the latest updates but it is not there! Two questions: 1. Who is responsible for the script ? When I went to http://clamav-du.securesites.net/ I got redirected to clamav ? Can someone from ClamAV fix the script ? The script has been fixed. Thank you for letting us know that there was a problem with it. 2. How can I have sigtool list actual virus signatures (not just virus names) ? mkdir somedirectory ; cd somedirectory ; sigtool --unpack-current=main.cvd ; sigtool --unpack-current=daily.cvd ; rm COPYING ; cat * -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland | And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http://lurker.clamav.net/list/clamav-users.html Glad to know that... __ Do you Yahoo!? Take Yahoo! Mail with you! Get it on your mobile phone. http://mobile.yahoo.com/maildemo ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Is this a bug with virus database or updatescripts ???
On Fri, 01 Apr 2005 at 9:32:36 -0800, Joanna Roman wrote: Le vendredi 1 Avril 2005 00:50, Joanna Roman a crit : I noticed that a lot of virus sigs are not available in the virus database. For example, I tried to search in the virus database (http://clamav-du.securesites.net/cgi-bin/clamgrok) for HTML.Phishing.Bank-156, which is in the latest updates but it is not there! Two questions: 1. Who is responsible for the script ? When I went to http://clamav-du.securesites.net/ I got redirected to clamav ? Can someone from ClamAV fix the script ? The script has been fixed. Thank you for letting us know that there was a problem with it. 2. How can I have sigtool list actual virus signatures (not just virus names) ? mkdir somedirectory ; cd somedirectory ; sigtool --unpack-current=main.cvd ; sigtool --unpack-current=daily.cvd ; rm COPYING ; cat * -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Is this a bug with virus database or updatescripts ???
On Thu, 2005-03-31 at 19:22 -0800, Joanna Roman wrote: --- Securiteinfo.com [EMAIL PROTECTED] wrote: Hello, Le vendredi 1 Avril 2005 00:50, Joanna Roman a crit : I noticed that a lot of virus sigs are not available in the virus database. For example, I tried to search in the virus database (http://clamav-du.securesites.net/cgi-bin/clamgrok) for HTML.Phishing.Bank-156, which is in the latest updates (http://lurker.clamav.net/message/20050331.095845.0b407689.en.html) but it is not there! To check if the virus database include a particular virus signature please use : sigtool -l|grep name_of_virus eg : sigtool -l|grep HTML.Phishing.Bank-156 The result is yes, HTML.Phishing.Bank-156 is in the virus database. Regards, Arnaud ___ http://lurker.clamav.net/list/clamav-users.html But when it did not show up in the search result ?? Try search it at the following link and you would get nothing ... ! http://clamav-du.securesites.net/cgi-bin/clamgrok A search on this page for Phishing.Bank gives back 5 results but sigtool -l |grep Phishing.Bank|wc -l gives 163 Phishing.Bank results. Conclusion the cgi script is corrupt and not clamav This is also the answer to the other question from you What's wrong with the database Maurice Lucas ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Is this a bug with virus database or updatescripts ???
--- Maurice Lucas [EMAIL PROTECTED] wrote: On Thu, 2005-03-31 at 19:22 -0800, Joanna Roman wrote: --- Securiteinfo.com [EMAIL PROTECTED] wrote: Hello, Le vendredi 1 Avril 2005 00:50, Joanna Roman a crit : I noticed that a lot of virus sigs are not available in the virus database. For example, I tried to search in the virus database (http://clamav-du.securesites.net/cgi-bin/clamgrok) for HTML.Phishing.Bank-156, which is in the latest updates (http://lurker.clamav.net/message/20050331.095845.0b407689.en.html) but it is not there! To check if the virus database include a particular virus signature please use : sigtool -l|grep name_of_virus eg : sigtool -l|grep HTML.Phishing.Bank-156 The result is yes, HTML.Phishing.Bank-156 is in the virus database. Regards, Arnaud ___ http://lurker.clamav.net/list/clamav-users.html But when it did not show up in the search result ?? Try search it at the following link and you would get nothing ... ! http://clamav-du.securesites.net/cgi-bin/clamgrok A search on this page for Phishing.Bank gives back 5 results but sigtool -l |grep Phishing.Bank|wc -l gives 163 Phishing.Bank results. Conclusion the cgi script is corrupt and not clamav This is also the answer to the other question from you What's wrong with the database Maurice Lucas ___ http://lurker.clamav.net/list/clamav-users.html Two questions: 1. Who is responsible for the script ? When I went to http://clamav-du.securesites.net/ I got redirected to clamav ? Can someone from ClamAV fix the script ? 2. How can I have sigtool list actual virus signatures (not just virus names) ? __ Yahoo! Messenger Show us what our next emoticon should look like. Join the fun. http://www.advision.webevents.yahoo.com/emoticontest ___ http://lurker.clamav.net/list/clamav-users.html
