Sander Holthaus wrote:
Firstly, I just wanted to say a big thanks to everyone who's sent
samples, encouragement and comments,
regarding the unofficial phishing signatures!
Is there any project to for spyware signatures, that would be awesome.
raj
___
Mar Matthias Darin wrote:
Hello,
Rajkumar S writes:
How short can this buffer go? Does this file needs to be seekable?
Ideally, I would say 16K would be as small as you want to go. If the
buffer is to small, the transfer speed will suffer.
That's a nice number. I am pretty encourag
Rob MacGregor wrote:
On 1/30/06, Rajkumar S <[EMAIL PROTECTED]> wrote:
The idea is to have a small packet queue where last n packets are
stored, scanned and then transmitted in a cyclic fashion. ie first
n-1 packets will just gets queued, when the nth packet arrives, the
queue is scanne
Mar Matthias Darin wrote:
I have done some research on this already... If you store the file in a
disk buffer (say max 100K at a shot using tmpfs for speed), then scan
the buffer, it does indeed work.
How short can this buffer go? Does this file needs to be seekable?
Where your problem is go
Rob MacGregor wrote:
1) You'd need to decode the packet contents on the fly
2) Anything running over 1 packet would never be spotted
Just wondering how far a signature can go? Does the scanner needs to go back and forth in
a file for scanning or can it scan a stream as it passes by? How far
Hello,
I am running qmail-ldap with qmail scanner with clamav (Debian package
0.80-7). Today I received a blocked intimation with a virus name
Zip.ExceededFileSize? The attachment size is less than 1 MB. I am
appending my clamd.conf with this mail. Can some one enlighten me as to
what caused th
Hello all,
My mail server running Qmail-Scanner/clamav/spam assassin, recorded a
strange virus from Sat, 21 Feb 2004 12:44:31 +0530 to Sat, 21 Feb 2004
18:02:05 +0530, the name of the virus being CLAMUKO:(null):RC:0:, ie
null. Is this a new unnamed virus or some bug in ClamAV?
raj
---
Starbane wrote:
Considering the speed at which this was added to the database (and the
last three major mail worms that got treated similarly) I'm just
terribly impressed with the ClamAV devs.
I run ClamAV for our local ISP, and I too have been similarly impressed.
I am now preparing a talk abou
Hi,
I am a new user of clamav and it works great!!! a bug kudos for all
developers!!
I maintain www.sarovar.org and in that we have a facility for mirroring
free software projects in India at http://sarovar.org/mirrors/
I would like to host a mirror of clam av in it. what are the procedures
f
