[Clamav-users] Re: javascript virus

2005-05-31 Thread René Berber
Jim Popovitch wrote: I have an HTML file that contains some bad javascript. While the javascript itself isn't malicious, what it does is. It begins a download process that eventually gives up your PC to others. Should clam(d)scan identify something like this as a virus? Here is a

Re: [Clamav-users] Re: javascript virus

2005-05-31 Thread Jim Popovitch
On Tue, 2005-05-31 at 09:08 -0500, René Berber wrote: Don't do this! Any wannabe-virus-builder-kid will want to get a hand on samples like this. Well, if they don't have it by now then they aren't educated enough to get it now. It doesn't make it truly newsworthy just because this is the

Re: [Clamav-users] Re: javascript virus

2005-05-31 Thread Bob Hutchinson
On Tuesday 31 May 2005 15:46, Jim Popovitch wrote: On Tue, 2005-05-31 at 09:08 -0500, René Berber wrote: Don't do this! Any wannabe-virus-builder-kid will want to get a hand on samples like this. Well, if they don't have it by now then they aren't educated enough to get it now. It

Re: [Clamav-users] Re: javascript virus

2005-05-31 Thread Dennis Peterson
Jim Popovitch said: The javascript will run on any box, linux included. What it does (install .exe, etc.) is only unique to MS Windows. It does this by downloading this file: h--p://69.50.177.102/x155/ind.php which then proceeds to download this file:

Re: [Clamav-users] Re: javascript virus

2005-05-31 Thread Jim Popovitch
On Tue, 2005-05-31 at 09:28 -0700, Dennis Peterson wrote: Jim Popovitch said: The javascript will run on any box, linux included. What it does (install .exe, etc.) is only unique to MS Windows. It does this by downloading this file: h--p://69.50.177.102/x155/ind.php which then

Re: [Clamav-users] Re: javascript virus

2005-05-31 Thread Todd Lyons
Jim Popovitch wanted us to know: should be doing for the masses. I'll shutup now since it is all too apparent that ppl think I came here to get individual assistance in solving a problem rather than to identify a potential oversight in clamav. Don't take it personally until an actual developer

Re: [Clamav-users] Re: javascript virus

2005-05-31 Thread Dennis Peterson
Jim Popovitch said: On Tue, 2005-05-31 at 09:28 -0700, Dennis Peterson wrote: To me, the original javascript IS a virus and SHOULD be reported by clam(d)scan. -Jim P. If this is the case then adding the script to any content filter you run should be a minimum step while you're

Re: [Clamav-users] Re: javascript virus

2005-05-31 Thread Brian Morrison
On Tue, 31 May 2005 10:25:19 -0700 in [EMAIL PROTECTED] Todd Lyons [EMAIL PROTECTED] wrote: Don't take it personally until an actual developer tells you that you're wasting your time. Read the archives, figure out which posters are inflammatory, and add them to your plonk list. It makes