Re: [Clamav-users] Spyware detection...

2005-09-12 Thread Stephen J. Smoogen
man psyche > instead of wreaking havoc on binary data. > I am currently looking at doing the same thing. I have a set of boxes that I am planning to 'infect' with spyware and then start making signatures for them. It is a rather slow process at the moment.. -- Stephen

Re: [Clamav-users] Spyware detection...

2005-09-15 Thread Stephen J. Smoogen
e] > > Perhaps you might offer to pay the clamav group to add the features you > desire. > > "free" is speech not beer. > > > ___ > http://lurker.clamav.net/list/clamav-users.html >

Re: [Clamav-users] Spyware detection...

2005-09-15 Thread Stephen J. Smoogen
> -> > signatures.pdf > > (http://www.clamav.net/doc/latest/signatures.pdf) > > -- > Jason Englander <[EMAIL PROTECTED]> > 394F 7E02 C105 7268 777A 3F5A 0AC0 C618 0675 80CA > > ___________ > http://lurke

Re: [Clamav-users] Spyware detection...

2005-09-16 Thread Stephen J. Smoogen
promised botnet. I have not seen much FTP these days... but it was only about 100 or so tools I looked at, and I know that is a small subset of some of this crap. -- Stephen J Smoogen. CSIRT/Linux System Administrator ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Clamav Update with Fedora Core

2005-09-21 Thread Stephen J. Smoogen
oo! Mail has the best spam protection around > http://mail.yahoo.com > ___________ > http://lurker.clamav.net/list/clamav-users.html > -- Stephen J Smoogen. CSIRT/Linux System Administrator ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Common Malware Enumeration

2005-09-27 Thread Stephen J. Smoogen
the process and I think for ClamAV > the process is working very well. > > dp > _______________ > http://lurker.clamav.net/list/clamav-users.html > -- Stephen J Smoogen. CSIRT/Linux System Administrator ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Common Malware Enumeration

2005-09-27 Thread Stephen J. Smoogen
On 9/27/05, Tripp Sims <[EMAIL PROTECTED]> wrote: > Stephen J. Smoogen wrote: > > > The standard big stick is that the US Govt OMB will require all US > > Govt Computers to use vendors that list their viruses with the CME > > numbers. This uses the 'we are go

Re: [Clamav-users] Common Malware Enumeration

2005-09-27 Thread Stephen J. Smoogen
On 9/27/05, Tripp Sims <[EMAIL PROTECTED]> wrote: > Stephen J. Smoogen wrote: > > >From my day job. When looking at purchasing various products, we go > > So you have experienced first hand, where 'open source' (free as in > speech) products have gotte

Re: [Clamav-users] Version 0.87 installed, outdated message claims 0.86.2

2005-09-28 Thread Stephen J. Smoogen
v will flag that no matter how long in the past. I havent had time to try and find a fix. > > -Don > ___ > http://lurker.clamav.net/list/clamav-users.html > -- Stephen J Smoogen. CSIRT/Linux System Administrator __

Re: [Clamav-users] Version 0.87 installed, outdated message claims 0.86.2

2005-09-29 Thread Stephen J. Smoogen
nd find a fix. > > > Ah, I see - so it's not really a problem with the versions per se. When the > logs rotate again, will it clear up? > -Don Yes. I have updated to logwatch-6.1 today.. I am going to see if they have fixed it or not upstream. -- Stephen J Smoogen. CSIRT/Linux System Administrator ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Version 0.87 installed, outdated message claims 0.86.2

2005-09-29 Thread Stephen J. Smoogen
row morning's > log message. Cool. Sorry if I sent you on a wild-goose-chase. I have a similar problem where logwatch would say "You havent updated." and it was due to logwatch not getting its dates correct when parsing the log file (I confirmed this by lookin in my /var/log/freshclam.log), restarting the daemons and rebooting the system.. the only thing saying it was out of date was an old log entry in freshclam. -- Stephen J Smoogen. CSIRT/Linux System Administrator ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] How good are clamav's spyware signatures ?

2005-10-25 Thread Stephen J. Smoogen
of. There are some side projects that I have been told one can google for. -- Stephen J Smoogen. CSIRT/Linux System Administrator ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] How good are clamav's spyware signatures ?

2005-10-25 Thread Stephen J. Smoogen
On 10/25/05, Stephen J. Smoogen <[EMAIL PROTECTED]> wrote: > On 10/24/05, Joanna Roman <[EMAIL PROTECTED]> wrote: > > No one has answered this Q so far. Just I am posting > > it again. > > > > I am using an improved version of SCAVR (Squid ClamAV > >

Re: [Clamav-users] Once again a Newbe question

2005-11-20 Thread Stephen J. Smoogen
system and I don't remember having this > level of trouble. > > Darryl Baker > [EMAIL PROTECTED] > > > > ___________ > http://lurker.clamav.net/list/clamav-users.html > -- Stephen J Smoogen. CSIRT/Linux System Administrato