Update: I am getting lots of emails that appear to be viruses, following the same pattern as W32.Netsky.B, and this is my original reason for thinking it was a new variant of this virus.
The attachments are 0 bytes - so even if I was able to work out how to generate a signature, I couldn't! Anyone any ideas on this? Could this be a new [broken] variant that is sending mails to my mail server, but not infecting me? On Wednesday 25 February 2004 4:37 pm, Andrew McCall wrote: > Hi Folks, > > I have a live copy of what I presume to be W32.Netsky.C on my server right > now in Maildir format. I am trying to generate a signature for it using > the following command: > > /usr/local/clamav/bin/clamscan --stdout --mbox > 1077205367.25429.saturn,S=1212 > > I receive the following report: > > 1077205367.25429.saturn,S=1212: OK > > ----------- SCAN SUMMARY ----------- > Known viruses: 20799 > Scanned directories: 0 > Scanned files: 1 > Infected files: 0 > Data scanned: 0.00 MB > I/O buffer size: 131072 bytes > Time: 1.259 sec (0 m 1 s) > > I *know* this file is a new virus, and want to generate a signature from > it. But the documentation isn't clear on exactly how to do this. > > Please can someone help? > > Thanks, > > Andrew McCall ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
