Re: [Clamav-users] difference is virus signature numbers...

2008-02-25 Thread Tomasz Kojm
On Tue, 26 Feb 2008 09:42:31 +0530 Anant Athavale <[EMAIL PROTECTED]> wrote: > I am finding a difference in the number of virus signatures. When > downloaded it says, [...] > There is a difference about 558 signatures. That's correct. Those 558 signatures are PUA sigs and they're not loaded by

[Clamav-users] difference is virus signature numbers...

2008-02-25 Thread Anant Athavale
Dear List: I am finding a difference in the number of virus signatures. When downloaded it says, Downloading daily-5995.cdiff [100%] Downloading daily-5996.cdiff [100%] daily.inc updated (version: 5996, sigs: 50415, f-level: 26, builder: ccordes) Database updated (220091 signatures) from db.in

Re: [Clamav-users] False positive Phishing.Heuristics.Email.SpoofedDomain

2008-02-25 Thread Manuel Lemos
Hello, on 02/22/2008 12:23 PM Jan-Pieter Cornet said the following: >> I tracked down the issue and found that ClamAV was marking the messages >> as Phishing, specifically Phishing.Heuristics.Email.SpoofedDomain . >> >> I tested the message and isolated the HTML excerpt that seemed to >> trigger t

Re: [Clamav-users] News for ClamAV Live CD

2008-02-25 Thread Brandon Perry
Group is on Google Groups... http://groups.google.com/group/clamav-live-cd On Mon, 2008-02-25 at 18:59 -0800, Dennis Peterson wrote: > Brandon Perry wrote: > > So far, I have had a lot of good feedback from people using the ClamAV > > Live CD. It looks like it might break 100 downloads this month.

Re: [Clamav-users] News for ClamAV Live CD

2008-02-25 Thread Brandon Perry
Heh, good idea. On Mon, 2008-02-25 at 18:59 -0800, Dennis Peterson wrote: > Brandon Perry wrote: > > So far, I have had a lot of good feedback from people using the ClamAV > > Live CD. It looks like it might break 100 downloads this month. This > > being said, I have had some requests for daily up

Re: [Clamav-users] News for ClamAV Live CD

2008-02-25 Thread Dennis Peterson
Brandon Perry wrote: > So far, I have had a lot of good feedback from people using the ClamAV > Live CD. It looks like it might break 100 downloads this month. This > being said, I have had some requests for daily uploads since some people > either use it in an environment without internet or where

[Clamav-users] News for ClamAV Live CD

2008-02-25 Thread Brandon Perry
So far, I have had a lot of good feedback from people using the ClamAV Live CD. It looks like it might break 100 downloads this month. This being said, I have had some requests for daily uploads since some people either use it in an environment without internet or where it isn't practical to try an

Re: [Clamav-users] Trojan.Zonebac false positives?

2008-02-25 Thread Brandon Perry
Thanks. On Mon, 2008-02-25 at 17:16 +0100, Arnaud Jacques wrote: > Hello, > > Le lundi 25 février 2008 16:57, Brandon Perry a écrit : > > After updating today, I am getting many legit-looking executables > > (Yahoo!, HP, SmartBridge, etc...) being marked as Trojan.Zonebac. > > This signature wil

Re: [Clamav-users] Trojan.Zonebac false positives?

2008-02-25 Thread Arnaud Jacques
Hello, Le lundi 25 février 2008 16:57, Brandon Perry a écrit : > After updating today, I am getting many legit-looking executables > (Yahoo!, HP, SmartBridge, etc...) being marked as Trojan.Zonebac. This signature will be removed on next update. -- Cordialement / Best regards, Arnaud Jacques C

[Clamav-users] Trojan.Zonebac false positives?

2008-02-25 Thread Brandon Perry
After updating today, I am getting many legit-looking executables (Yahoo!, HP, SmartBridge, etc...) being marked as Trojan.Zonebac. Is anyone else having a problem with this? I will submit it a sample, but I wanted to know if anyone was having this same problem. >From looking at the Symantec site.