Hi, I'm currently trying to figure out a way to compare the content of the clamav database with the ITW-list of www.wildlist.org of the last months to be able to tell a ITW virus signature from a zoo-signature. The background for this is to have the possibility to generate subsets of the database for current virus threats and the more exotic virus signatures.
AFAICS in the virus submission messages of the [EMAIL PROTECTED] mailing list there are references to other antivirus vendors naming schemes for new submissions. I would be willing to write a parser script to generate a cross reference for the new submissions, but I'm not sure how to handle older signatures. Are there any plans of the clamAV team to use the Wildlist.org naming scheme in the future or provide a realtime cross reference , or does such a cross-reference already exist somewhere? Best Regards Peter -- Peter Vollmer Software Engineer Innominate Security Technologies AG /device attached security/ Albert-Einstein-Str. 14 D-12489 Berlin, Germany www.innominate.com _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html
