Re: [Clamav-users] Question on Signatures

2005-09-01 Thread Securiteinfo.com
Hello Markus, Le vendredi 2 Septembre 2005 01:00, Markus Beck a écrit : > Hello Arnaud, > > On Thu, 1 Sep 2005 23:33:26 +0200 > > "Securiteinfo.com" <[EMAIL PROTECTED]> wrote: > > Well, to create a Clamav signature, you can read this first : > > http://www.clamav.net/doc/0.86.2/signatures.pdf > >

Re: [Clamav-users] Question on Signatures

2005-09-01 Thread Markus Beck
Hello Arnaud, On Thu, 1 Sep 2005 23:33:26 +0200 "Securiteinfo.com" <[EMAIL PROTECTED]> wrote: > Well, to create a Clamav signature, you can read this first : > http://www.clamav.net/doc/0.86.2/signatures.pdf So, would this be a good and working Signature (leaving anything about codeexecution outs

Re: [Clamav-users] Question on Signatures

2005-09-01 Thread Securiteinfo.com
Hello Markus, Le jeudi 1 Septembre 2005 23:11, Markus Beck a écrit : > Hello Arnaud, > > thank You for Your fast answer! > > On Thu, 1 Sep 2005 18:18:04 +0200 > > "Securiteinfo.com" <[EMAIL PROTECTED]> wrote: > > There is different techniques to create a signature. One is to base > > the signatur

Re: [Clamav-users] Question on Signatures

2005-09-01 Thread Markus Beck
Hello Arnaud, thank You for Your fast answer! On Thu, 1 Sep 2005 18:18:04 +0200 "Securiteinfo.com" <[EMAIL PROTECTED]> wrote: > There is different techniques to create a signature. One is to base > the signature against the executable code of the malware. In that > way, many different variant (

RE: [Clamav-users] handle_user: unable to find user

2005-09-01 Thread Matthew Yette
-Original Message- From: Fast Johnny [mailto:[EMAIL PROTECTED] Sent: Thursday, September 01, 2005 3:27 PM To: ClamAV users ML Subject: Re: [Clamav-users] handle_user: unable to find user > > > > Umm..this is clamav, not spamassassin ML. > > -Jim >

Re: [Clamav-users] handle_user: unable to find user

2005-09-01 Thread Fast Johnny
> > > > Umm..this is clamav, not spamassassin ML. > > -Jim > ___ > http://lurker.clamav.net/list/clamav-users.html > me + posting on the wrong list = big loser (sorry) Start yo

Re: [Clamav-users] handle_user: unable to find user

2005-09-01 Thread Jim Maul
Fast Johnny wrote: I keep seeing these messages in my mail.info: Aug 31 10:46:40 localhost spamd[19280]: connection from localhost.localdomain [127.0.0.1] at port 60582 Aug 31 10:46:40 localhost spamd[19280]: handle_user: unable to find user '[EMAIL PROTECTED]'! Aug 31 10:46:40 localhost spamd[

[Clamav-users] handle_user: unable to find user

2005-09-01 Thread Fast Johnny
I keep seeing these messages in my mail.info: Aug 31 10:46:40 localhost spamd[19280]: connection from localhost.localdomain [127.0.0.1] at port 60582 Aug 31 10:46:40 localhost spamd[19280]: handle_user: unable to find user '[EMAIL PROTECTED]'! Aug 31 10:46:40 localhost spamd[19280]: checking m

Re: [Clamav-users] Question on Signatures

2005-09-01 Thread Securiteinfo.com
Hello Markus, Le jeudi 1 Septembre 2005 17:47, Markus Beck a écrit : > Hello everybody, > > which techniques are implemented in clamav so far as to recognize > little derivates of malware? I'm thinking about versions of > Phatbots using only e.g. different IRC-Channels: Wouldn't be their > signatu

[Clamav-users] Question on Signatures

2005-09-01 Thread Markus Beck
Hello everybody, which techniques are implemented in clamav so far as to recognize little derivates of malware? I'm thinking about versions of Phatbots using only e.g. different IRC-Channels: Wouldn't be their signatures different, too? Markus ___ http: