On Thu, 08 Jan 2004 at 15:35:43 +0000, Antony Stone wrote: > On Thursday 08 January 2004 3:26 pm, Steven King wrote: > > > There are places on the web where virus information > > can be obtained. For example, Google came up with > > http://www.f-secure.com/virus-info/wild.html. No doubt > > htere are others.
Some vendors publish searchable information about viruses they detect, e.g.: http://www.symantec.com/avcenter/vinfodb.html http://cgi.f-secure.com/cgi-bin/search.cgi http://www.sophos.com/ > True, there are plenty of such resources around; the difficulty is that not > all anti-virus vendors agree on the name of each virus - there are commonly > two or three quite different names for a single virus, together with minor > variations such as W32/, .Worm, @MM, etc used as prefixes and suffixes. Some vendors show in their announcements also names used by others ("Alias", "Also Known As" etc.). > It would clearly be a fair amount of work to create a ClamAV directory of > viruses and their characteristics (and I can't see that this is purposeful > given the quantity of information already out on the Internet telling people > what they need to know), however it would certainly be very useful to have a I fully agree that it would be useful. The problem is that we just haven't got enough time for preparing such directory. Even processing everyday submissions takes much time. > cross-reference list of the ClamAV name for a virus, and other A-V vendors' > names for the same thing. This at least would allow people to know what to > look for in an alternative virus encyclopaedia. In our announcements about database updates we try to inform about names under which viruses are detected by other AV scanners by means of "Alias: " field. Unfortunately, this information is not always available. Especially when a virus is new and other vendors don't detect it. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
