Pancho wrote:
Hi - thanks to everyone for the replies. I have seen 2 replies now and it
may well be that I have not been clear enough because both are at cross
purposes.
Then it might help if you alaborated on what you meant.
Unfortunately I don't have further time to invest in this topic but I
Hi,
At http://www.clamav.net/lang/en/faq/faq-misc/ I found this:
Why is ClamAV calling the XXX virus with another name?
This usually happens when we add a signature before other AV vendors. No
well-known name is available at that moment so we
On 1/12/13 5:22 AM, Pancho wrote:
All in all for me there is a fairly compelling argument for going this route
so I thought I would put it out there to see what others think.
Kind regards
Ricki
Is there something about real-time day one virus outbreaks and US
government involvement that you
Pancho wrote:
While I understand the comment, it makes it risky I believe from a security
perspective to tell users anything more than file contains virus.
I say this because if we find a virus and provide the message file contains
virus with name ClamAV proprietary virus name XYZ then
.
If not, well such is life.
-Original Message-
From: clamav-users-boun...@lists.clamav.net
[mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Simon Hobson
Sent: 12 January 2013 06:32 PM
To: clamav-users@lists.clamav.net
Subject: Re: [clamav-users] Virus names - a rose by any name?
Pancho
-
From: clamav-users-boun...@lists.clamav.net
[mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Simon Hobson
Sent: 12 January 2013 06:32 PM
To: clamav-users@lists.clamav.net
Subject: Re: [clamav-users] Virus names - a rose by any name?
Pancho wrote:
While I understand the comment
[mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Joel Esler
Sent: 12 January 2013 11:02 PM
To: ClamAV users ML
Cc: ClamAV users ML
Subject: Re: [clamav-users] Virus names - a rose by any name?
So what you want is for us to change the millions of Names we have for Trojans
to match one of our
2013 06:32 PM
To: clamav-users@lists.clamav.net
Subject: Re: [clamav-users] Virus names - a rose by any name?
Pancho wrote:
While I understand the comment, it makes it risky I believe from a
security perspective to tell users anything more than file contains
virus.
I say
-users-boun...@lists.clamav.net] On Behalf Of Shawn Webb
Sent: 12 January 2013 11:37 PM
To: ClamAV users ML
Subject: Re: [clamav-users] Virus names - a rose by any name?
In addition to having the same sentiments Joel has, I'd like to explain why not
displaying the name of the virus does not add any
At 02:02 PM 1/12/2013, Pancho wrote:
Again I believe you are talking at cross purposes but regardless I
am entirely comfortable if you disagree with the suggestion I made.
As I mentioned to Joel, please feel free to throw it away.
Wow, you don't like any criticsm, don't you?
Seriously,
On Wed, 14 Apr 2004, Bart Silverstrim wrote:
On Apr 13, 2004, at 7:16 PM, jef moskot wrote:
Personally, I don't understand why this particular name has not been
changed, given the prevalence of this worm.
Statistics being broken, it would create transient viruses that in
reality were just
A central repository of cross-references would probably be the best and
most resilient solution.
I definitely agree, but that's a lot of work.
I partially disagree. It would be possible to fill a database with the
announcements on the virusdb list without user intervention.. procmail and
PHP
Quoting jef moskot [EMAIL PROTECTED]:
I think a concern with image is legitimate. Calling a well-known worm
something else for no immediately obvious purpose (yes, it makes sense
How many times must we endure this incorrect statement?
when you explain it to someone, but most users wouldn't get
I hope this is not a redundant question here.
I joined this list just recently so I hope
somebody can point me in the right direction.
Is there anywhere I can check the corresponding
virus names for ClamAV? I understand that
the names from some other AVs are not the
same as how ClamAV calls it.
On Tuesday 13 April 2004 9:51 pm, Henry Harvey wrote:
Is there anywhere I can check the corresponding
virus names for ClamAV? I understand that
the names from some other AVs are not the
same as how ClamAV calls it. Like Netsky.P
is actually in SomeFool.P in ClamAV.
I'm looking at the
Henry Harvey wrote:
I'm looking at the ClamAV website and can't
find info. Where do I check how ClamAV
calls these viruses?
The best place right now is the archive for the virus db update list.
You can search there for the Clam name, often names of commercial
products are mentioned there.
On Tue, 13 Apr 2004, Henry Harvey wrote:
I hope this is not a redundant question here.
I joined this list just recently so I hope
somebody can point me in the right direction.
Is there anywhere I can check the corresponding
virus names for ClamAV?
Not currently, no. I've been working on a
On Wed, 14 Apr 2004, Jesper Juhl wrote:
I've been working on a website to allow users to do exactely that, but
due to being overworked and various other issues it has not progressed
as fast as I had hoped - still working on it when I have a chance
though, so expect something like that in the
On Wednesday 14 April 2004 12:16 am, jef moskot wrote:
I think if the website just said What we call 'SomeFool' others call
'Netsky', 95% of all questions would be covered.
That seems like a good idea to me.
Personally, I don't understand why this particular name has not been
changed, given
On Wed, 14 Apr 2004, Antony Stone wrote:
The problem here is that it's only possible to measure prevalence once
there's been quite a lot of it under the old name...
I agree with this in principle, but I think this is a special case.
There's no denying that this is one of the most popular
On Wednesday 14 April 2004 1:09 am, jef moskot wrote:
On Wed, 14 Apr 2004, Antony Stone wrote:
The problem here is that it's only possible to measure prevalence once
there's been quite a lot of it under the old name...
Other viruses/worms have been renamed in the past, and while I
I'm behind the Clam team in that they focus on getting sigs out before
worrying about the name.
I don't know if this is a technical limitation of the virus db's (and
not sure if this has been mentioned previously, sorry) but what's to
stop the name of the virus being changed in the virus db
At 22:12 06-04-2004 +0200, you wrote:
Diego d'Ambra wrote:
And that is what we'll (try to) do in the future (if a common name has
been established).
But that would break statistics. I don't mind if the name is different as
long as it can be cross-referenced. Someone was working on a web site with
On Apr 6, 2004, at 3:23 PM, Diego d'Ambra wrote:
-Original Message-
From: [EMAIL PROTECTED] [mailto:clamav-users-
[EMAIL PROTECTED] On Behalf Of jef moskot
Sent: 6. april 2004 19:08
To: [EMAIL PROTECTED]
Subject: Re: [Clamav-users] Virus Names
On Tue, 6 Apr 2004, Eric Rostetter wrote
On Apr 6, 2004, at 4:31 PM, Eric Rostetter wrote:
Quoting jef moskot [EMAIL PROTECTED]:
On Tue, 6 Apr 2004, Eric Rostetter wrote:
But changing the name after the fact would just confuse people more.
I completely disagree. Hardcore Clam users are more likely to
understand
the reality of the
Eric Rostetter at 2004-04-06 15:37 from [EMAIL PROTECTED] wrote:
But changing the name after the fact would just confuse people
more. We can't go merrily along for a week or so until the AV people or
the media -- and often it is the media who decide -- come up with the most
popular name, and
Stuart Mycock Sent: Wednesday, April 07, 2004 4:24 AM
I'd prefer to adopt the approach of letting the Clam team get a def out
with any name they want and have a non-developer publish basic virus
info on an area of the Clam site, and on that page you'd just have the
blurb on SomeFool.Q for
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of B. van
Ouwerkerk
Sent: Wednesday, April 07, 2004 2:00 AM
To: [EMAIL PROTECTED]
Subject: Re: [Clamav-users] Virus Names
I don't fancy the idea of doing the same job someone else does
but I could
do
On Mon, 5 Apr 2004 23:38:08 -0500
Erick Perez - Vision Media [EMAIL PROTECTED] wrote:
Question:
If Worm.SomeFool is Netsky, then why is not labeled as netsky?
Also, is there a way to make an alias in the virus database so my users can
see netsky instead of Worm.Somefool?
It's time to place
Quoting Erick Perez - Vision Media [EMAIL PROTECTED]:
Question:
If Worm.SomeFool is Netsky, then why is not labeled as netsky?
Answer:
If netsky is Worm.SomeFool, then why is it not labeled as Worm.SomeFool?
Basically that's because the users keep complaning about the virus names
that cannot be
Quoting Graham Murray [EMAIL PROTECTED]:
So maybe, as with celestial objects, there should be agreement that
the first AV 'vendor' to publish a detection for a virus should be
given the honour of naming it and the other vendors adopt the same
name rather than inventing their own (and potentially
On Tuesday 06 April 2004 3:58 pm, Eric Rostetter wrote:
Quoting Erick Perez - Vision Media [EMAIL PROTECTED]:
Question:
If Worm.SomeFool is Netsky, then why is not labeled as netsky?
Answer:
If netsky is Worm.SomeFool, then why is it not labeled as Worm.SomeFool?
Do you call people
If netsky is Worm.SomeFool, then why is it not labeled as Worm.SomeFool?
Rhetoric aside, this is obviously an itch that needs scratched. Clam does a
wonderful job and (as was the case with SomeFool) does it faster than most.
Perhaps we might be able to scratch up support for an alias
On Tue, 6 Apr 2004, Eric Rostetter wrote:
If netsky is Worm.SomeFool, then why is it not labeled as Worm.SomeFool?
While I agree with this in principle, I think for instances where a
question like this pops up at least once a week just on this list, it
might be worth it to just bite the bullet
Subject: Re: [Clamav-users] Virus Names
Quoting Erick Perez - Vision Media [EMAIL PROTECTED]:
Question:
If Worm.SomeFool is Netsky, then why is not labeled as netsky?
Answer:
If netsky is Worm.SomeFool, then why is it not labeled as Worm.SomeFool?
Basically that's because the users keep
On Tue, 06 Apr 2004 at 12:17:05 -0400, Hanford, Seth wrote:
If we had as part of the submission process an additional field noting
what name the detecting AV called it
There is such a field! And if it's too short, you can add more
names/details/URLs in the description field (that big area
-Original Message-
From: [EMAIL PROTECTED] [mailto:clamav-users-
[EMAIL PROTECTED] On Behalf Of jef moskot
Sent: 6. april 2004 19:08
To: [EMAIL PROTECTED]
Subject: Re: [Clamav-users] Virus Names
On Tue, 6 Apr 2004, Eric Rostetter wrote:
If netsky is Worm.SomeFool, then why
Diego d'Ambra wrote:
And that is what we'll (try to) do in the future (if a common name has
been established).
But that would break statistics. I don't mind if the name is different
as long as it can be cross-referenced. Someone was working on a web site
with just that but I haven't heard of
On Tue, 6 Apr 2004, Eric Rostetter wrote:
But changing the name after the fact would just confuse people more.
I completely disagree. Hardcore Clam users are more likely to understand
the reality of the situation and realize that the ClamAV team has to call
the viruses SOMETHING. Usually,
Quoting jef moskot [EMAIL PROTECTED]:
On Tue, 6 Apr 2004, Eric Rostetter wrote:
But changing the name after the fact would just confuse people more.
I completely disagree. Hardcore Clam users are more likely to understand
the reality of the situation and realize that the ClamAV team has to call
On Tue, 6 Apr 2004, Eric Rostetter wrote:
Great for netsky since almost everyone uses it.
Exactly.
Should clamav have migrated along from SCO to NOVARG to MYDOOM just
because the others came along later and in that order?
It could easily be taken on a case-by-case basis. But, as even you
On Tuesday 06 April 2004 9:44 pm, jef moskot wrote:
The focus of the product is to stop viruses, not to name them with a
popular name.
Yes, but this is not best accomplished by calling users stupid (even
when they are).
That may be true, however it's no excuse for allowing stupid users to
On Tue, 6 Apr 2004, Antony Stone wrote:
There are many examples of the commercial A-V vendors having different
names for the same virus...
That's true, but when that's the case for an extremely prevalent virus,
it's usually noted in the media.
Using the well-known naming convention is a much
At 23:38 05-04-2004 -0500, you wrote:
Question:
If Worm.SomeFool is Netsky, then why is not labeled as netsky?
Also, is there a way to make an alias in the virus database so my users can
see netsky instead of Worm.Somefool?
Basically that's because the users keep complaning about the virus names
B. van Ouwerkerk wrote:
At 23:38 05-04-2004 -0500, you wrote:
Question:
If Worm.SomeFool is Netsky, then why is not labeled as netsky?
It would be good if all AV software would use the same names. Still,
most commercial AV vendors are using their own naming conventions and
so does Clamav.
Fisher [EMAIL PROTECTED] writes:
Actually, it is usually happen the Clamav recognises the virii before
the other AV vendors so no well-known name was available. See the
archive for the more detailed answers, this question already answered
here.
So maybe, as with celestial objects, there
On Tuesday 06 April 2004 9:48 am, Graham Murray wrote:
Fisher [EMAIL PROTECTED] writes:
Actually, it is usually happen the Clamav recognises the virii before
the other AV vendors so no well-known name was available. See the
archive for the more detailed answers, this question already
Graham Murray wrote:
So maybe, as with celestial objects, there should be
agreement that the first AV 'vendor' to publish a detection
for a virus should be given the honour of naming it and the
other vendors adopt the same name rather than inventing their
own (and potentially causing
Question:
If Worm.SomeFool is Netsky, then why is not labeled as netsky?
Also, is there a way to make an alias in the virus database so my users can
see netsky instead of Worm.Somefool?
Basically that's because the users keep complaning about the virus names
that cannot be found anywhere else
49 matches
Mail list logo
