Re: new AV plug-in for TB

2005-02-26 Thread Mark Wieder
B-

Thursday, February 24, 2005, 2:04:28 PM, you wrote:

David I find it a little odd that Eset/NOD32 isn't on that list.  They're
David usually pretty fast.  Where did you find that info anyway?  I'm curious.

BRiaNS http://www.hispasec.com/unaaldia/2308/

BRiaNS I hope you know spanish ;)

Well, that writeup *does* say that BitDefender, Kaspersky, NOD32v2,
Norman, and Panda all caught it on the way in, even though the virus
definitions weren't updated specifically for the variant.

-- 
-Mark Wieder
 Using The Bat! v1.63 Beta/7 on Windows 2000 5.0 Build 2195 Service Pack 4



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


new AV plug-in for TB

2005-02-24 Thread Roelof Otten
Hallo Everybody,

  Just found this piece of info at the TB forum at the ritlabs site

=
Topic title:
NEW: TBClamWin - AV Plugin for ClamWin

Message author: Marco Pontello
Message date: 02/24/2005 02:56:11
Message text:

I have coded this little plugin for The Bat!, to experiment with the
Plug-In API. It allow the use of (a previously installed) ClamWin as a
scanning engine for every saved or opened file attachment. ClamWin is
a Win32 version/port of the open source - GPL licensed - ClamAV antivirus.   

Here's the page with some info:
http://mark0.net/plugins-tb-tbclamwin-e.html

I developed  tested it with a trial version of The Bat!. Thanks to
anyone that will double check if it works correctly with some other versions. 
=

-- 
Groetjes, Roelof

Wizard's Guild Parking Only:Violators will be Toad.

The Bat! 3.0.9.1 Deep Alpha
Windows XP 5.1 Build 2600 Service Pack 2
1 pop3 account, server on LAN



pgpWxgSKePRqB.pgp
Description: PGP signature

Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: new AV plug-in for TB

2005-02-24 Thread B R i a N S

On Date : Thu, 24 Feb 2005 11:22:01 +0100
Roelof Otten [EMAIL PROTECTED] wrote this lines:

Roelof Hallo Everybody,

Roelof   Just found this piece of info at the TB forum at the ritlabs site

Roelof 
=
Roelof Topic title:
Roelof NEW: TBClamWin - AV Plugin for ClamWin

Roelof Message author: Marco Pontello
Roelof Message date: 02/24/2005 02:56:11
Roelof Message text:

Roelof I have coded this little plugin for The Bat!, to experiment with the
Roelof Plug-In API. It allow the use of (a previously installed) ClamWin as a
Roelof scanning engine for every saved or opened file attachment. ClamWin is
Roelof a Win32 version/port of the open source - GPL
Roelof licensed - ClamAV antivirus.   

Roelof Here's the page with some info:
Roelof http://mark0.net/plugins-tb-tbclamwin-e.html

Roelof I developed  tested it with a trial version of The Bat!. Thanks to
Roelof anyone that will double check if it works correctly with some other 
versions.
Roelof 
=

:o At last!!! i've been waiting a long time for it!!

ClamAV is a very good antivirus solution.  

--
Saludos,
B R i a N S (Cienfuegos, Cuba)

Using The Bat! 3.0.9.1 Deep Alpha under Windows 2000 5.0 Build 2195 
Service Pack 4 on a Pentium 4 2.4ghz with 256MB.

Wise men talk because they have something to say; fools, because they
have to say something.-- Plato (429-347 BC)
   




Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: new AV plug-in for TB

2005-02-24 Thread David Calvarese
B R i a N S wrote:
 :o At last!!! i've been waiting a long time for it!!
 
 ClamAV is a very good antivirus solution.
 
 

Better than Avast?

-- 
Dave Calvarese
PGP Key Available at http://home.comcast.net/~dhcalva/DavidCalvarese-dh.asc


signature.asc
Description: OpenPGP digital signature

Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: new AV plug-in for TB

2005-02-24 Thread Alexander S. Kunz
Hello B R i a N S  everyone else,

on 24-Feb-2005 at 19:01 you (B R i a N S) wrote:

 ClamAV is a very good antivirus solution.

God exists. Proof or faith?

-- 
Best regards,
 Alexander (http://www.neurowerx.de - ICQ 238153981)

All you need in life is ignorance and confidence, and then success is
sure. -- Mark Twain



Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: new AV plug-in for TB

2005-02-24 Thread Thomas Martin
Hello Alexander,

on Thursday, 24. February 2005, at 19:06:29 [GMT +0100] you wrote
regarding new AV plug-in for TB:

 ClamAV is a very good antivirus solution.

 God exists. Proof or faith?

It is very good, databases are actual, but has no background scanner and
can't clean files or messages. It is special designed for Mail
server.

-- 
Ciao

Thomas

Using:  TheBat! 3.0.2.10
System: Windows XP Build 2600 Service Pack 2
PGP:Key-ID: 0x70D9F03B
Visit:  TheBat! World on http://www.thebatworld.de





pgp2D70tMsjWP.pgp
Description: PGP signature

Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: new AV plug-in for TB

2005-02-24 Thread B R i a N S

On Date : Thu, 24 Feb 2005 12:11:07 -0500
David Calvarese [EMAIL PROTECTED] wrote this lines:

David B R i a N S wrote:
 :o At last!!! i've been waiting a long time for it!!
 
 ClamAV is a very good antivirus solution.

David Better than Avast?

Well, here is a list of antivirus solutions responding to the new
MyDoom version released on 16.02.2005 Guess who's on the top. ;)
It was the only one that could detect/remove MyDoom on 16.02.2005.

ClamAV 16.02.2005 23:02 :: Worm.Mydoom.M-2
Sophos 17.02.2005 00:02 :: W32/MyDoom-O
TrendMicro 17.02.2005 01:11 :: WORM_MYDOOM.M
F-Prot 17.02.2005 01:48 :: W32/[EMAIL PROTECTED]
McAfee 17.02.2005 01:53 :: W32/[EMAIL PROTECTED]
eTrust-Iris 17.02.2005 02:35 :: Win32/Mydoom.AU!Worm
Symantec 17.02.2005 03:30 :: [EMAIL PROTECTED]
eTrust-Vet 17.02.2005 06:35 :: Win32.Mydoom.AU!ZIP
Antivir 17.02.2005 07:11 :: Worm/MyDoom.BB
DrWeb 17.02.2005 08:10 :: Win32.HLLW.MyBot
BitDefender 17.02.2005 08:54 :: [EMAIL PROTECTED]
Panda 17.02.2005 08:54 :: W32/Mydoom.AO.worm
Norman 17.02.2005 09:25 :: [EMAIL PROTECTED]
AVG 17.02.2005 11:10 :: I-Worm/Mydoom.AP

--
Saludos,
B R i a N S (Cienfuegos, Cuba)

Using The Bat! 3.0.9.1 Deep Alpha under Windows 2000 5.0 Build 2195 
Service Pack 4 on a Pentium 4 2.4ghz with 256MB.

If a million people say a foolish thing, it is still a foolish
thing.-- Anatole France [Jacques Anatole Thibault] (1844-1924)
   




Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: new AV plug-in for TB

2005-02-24 Thread David Calvarese
B R i a N S wrote:
 On Date : Thu, 24 Feb 2005 12:11:07 -0500
 David Calvarese [EMAIL PROTECTED] wrote this lines:
 
 David B R i a N S wrote:
 :o At last!!! i've been waiting a long time for it!!
 
 ClamAV is a very good antivirus solution.
 
 David Better than Avast?
 
 Well, here is a list of antivirus solutions responding to the new
 MyDoom version released on 16.02.2005 Guess who's on the top. ;)
 It was the only one that could detect/remove MyDoom on 16.02.2005.
 
 ClamAV 16.02.2005 23:02 :: Worm.Mydoom.M-2
 Sophos 17.02.2005 00:02 :: W32/MyDoom-O
 TrendMicro 17.02.2005 01:11 :: WORM_MYDOOM.M
 F-Prot 17.02.2005 01:48 :: W32/[EMAIL PROTECTED]
 McAfee 17.02.2005 01:53 :: W32/[EMAIL PROTECTED]
 eTrust-Iris 17.02.2005 02:35 :: Win32/Mydoom.AU!Worm
 Symantec 17.02.2005 03:30 :: [EMAIL PROTECTED]
 eTrust-Vet 17.02.2005 06:35 :: Win32.Mydoom.AU!ZIP
 Antivir 17.02.2005 07:11 :: Worm/MyDoom.BB
 DrWeb 17.02.2005 08:10 :: Win32.HLLW.MyBot
 BitDefender 17.02.2005 08:54 :: [EMAIL PROTECTED]
 Panda 17.02.2005 08:54 :: W32/Mydoom.AO.worm
 Norman 17.02.2005 09:25 :: [EMAIL PROTECTED]
 AVG 17.02.2005 11:10 :: I-Worm/Mydoom.AP

I find it a little odd that Eset/NOD32 isn't on that list.  They're
usually pretty fast.  Where did you find that info anyway?  I'm curious.


-- 
Dave Calvarese
PGP Key Available at http://home.comcast.net/~dhcalva/DavidCalvarese-dh.asc


signature.asc
Description: OpenPGP digital signature

Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: new AV plug-in for TB

2005-02-24 Thread Chris Weaven
Hi,
The original quoted text below was written on 24/02/2005 20:17 my local 
time;

ClamAV 16.02.2005 23:02 :: Worm.Mydoom.M-2
Sophos 17.02.2005 00:02 :: W32/MyDoom-O
TrendMicro 17.02.2005 01:11 :: WORM_MYDOOM.M
F-Prot 17.02.2005 01:48 :: W32/[EMAIL PROTECTED]
McAfee 17.02.2005 01:53 :: W32/[EMAIL PROTECTED]
eTrust-Iris 17.02.2005 02:35 :: Win32/Mydoom.AU!Worm
Symantec 17.02.2005 03:30 :: [EMAIL PROTECTED]
eTrust-Vet 17.02.2005 06:35 :: Win32.Mydoom.AU!ZIP
Antivir 17.02.2005 07:11 :: Worm/MyDoom.BB
DrWeb 17.02.2005 08:10 :: Win32.HLLW.MyBot
BitDefender 17.02.2005 08:54 :: [EMAIL PROTECTED]
Panda 17.02.2005 08:54 :: W32/Mydoom.AO.worm
Norman 17.02.2005 09:25 :: [EMAIL PROTECTED]
AVG 17.02.2005 11:10 :: I-Worm/Mydoom.AP
I find it a little odd that Eset/NOD32 isn't on that list.  They're
usually pretty fast.
And Kaspersky!
--
Chris

Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Re: new AV plug-in for TB

2005-02-24 Thread B R i a N S

On Date : Thu, 24 Feb 2005 15:17:09 -0500
David Calvarese [EMAIL PROTECTED] wrote this lines:

David I find it a little odd that Eset/NOD32 isn't on that list.  They're
David usually pretty fast.  Where did you find that info anyway?  I'm curious.

http://www.hispasec.com/unaaldia/2308/

I hope you know spanish ;)

--
Cheers,
B R i a N S (Cienfuegos, Cuba)

Using The Bat! 3.0.9.1 Deep Alpha under Windows 2000 5.0 Build 2195 
Service Pack 4 on a Pentium 4 2.4ghz with 256MB.

I haven't failed, I've found 10,000 ways that don't work.-- Thomas
Edison (1847-1931)
   




Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html


Mod: Untrimmed reply (was: new AV plug-in for TB)

2005-02-24 Thread Roelof Otten
Hallo David,

On Thu, 24 Feb 2005 15:17:09 -0500GMT (24-2-2005, 21:17 +0100, where I
live), you wrote:

DC B R i a N S wrote:
 On Date : Thu, 24 Feb 2005 12:11:07 -0500
 David Calvarese [EMAIL PROTECTED] wrote this lines:

moderator
Note: This moderator's interjection is a note to all readers and not
just to the person being replied to, even if their post may have
instigated this reply. Please don't feel singled out David.

  '

Please trim replies to context. A sure fire indicator that
insufficient trimming has been done is that the original signature and
list footer remain in the quoted text.

To find out why these MOD messages are posted to the list instead of
private mail, please read the welcome message you received when you
subscribed.

Thank you.
/moderator

-- 
Groetjes, Roelof

WinErr: 010 Reserved for future mistakes by our developers

The Bat! 3.0.2.10
Windows XP 5.1 Build 2600 Service Pack 2
1 pop3 account, server on LAN



pgpVJ1ztnZTcY.pgp
Description: PGP signature

Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Mod: Untrimmed reply (was: new AV plug-in for TB)

2005-02-24 Thread Roelof Otten
Hallo B,

On Thu, 24 Feb 2005 16:01:09 -0500GMT (24-2-2005, 22:01 +0100, where I
live), you wrote:

BRI David Calvarese [EMAIL PROTECTED] wrote this lines:

David B R i a N S wrote:

moderator
Note: This moderator's interjection is a note to all readers and not
just to the person being replied to, even if their post may have
instigated this reply. Please don't feel singled out B.

  '

Please trim replies to context. A sure fire indicator that
insufficient trimming has been done is that the original signature and
list footer remain in the quoted text.

To find out why these MOD messages are posted to the list instead of
private mail, please read the welcome message you received when you
subscribed.

Thank you.
/moderator

-- 
Groetjes, Roelof

Wizard's Guild Parking Only:Violators will be Toad.

The Bat! 3.0.2.10
Windows XP 5.1 Build 2600 Service Pack 2
1 pop3 account, server on LAN



pgpj6O1wLf6UV.pgp
Description: PGP signature

Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Re: new AV plug-in for TB

2005-02-24 Thread Cory
On Thu, 24 Feb 2005 16:01:09 -0500, B R i a N S
[EMAIL PROTECTED] wrote:

Well, here is a list of antivirus solutions responding to the new
MyDoom version released on 16.02.2005 Guess who's on the top. ;)
It was the only one that could detect/remove MyDoom on 16.02.2005.

I'd say it's quite likely this MyDoom variety could have been detected
by scanners using heuristic methods with an earlier release date.
Not based on facts, just my feeling and experience over time with this
type of protection.

-- 
Happy flappin'!
 Corne' (aka Cory, The Batdmin)


Current version is 3.0.1.33 | 'Using TBUDL' information:
http://www.silverstones.com/thebat/TBUDLInfo.html