which limits the usefullness of piping. You're beginning to see why
people rarely used ipes under DOS :). I'm not sure how the various
versions of Windows have improved upon this sorry state of affairs.
--
Stephen White
---
This
anybody that wants
to have a go at creating a new signature for this.
--
Stephen White \ Oxford University Computing Society
System Administrator\ http://ox.compsoc.net/~swhite/
PGP Key ID: 0xC79E5B6A \<[EMAIL PROTECTED]>
-
oring Windows
executable.
Unfortunately I think my employer wants me to do some work rather than
create signatures so someone else will have to do that.
--
Stephen White <[EMAIL PROTECTED]>
-
To unsubscribe, e-mail: [EMAIL PRO
a file called
'eicar.com' (or similar) containing the text:
[EMAIL PROTECTED](P^)7CC)7}$EICAR-ST
ANDARD-ANTIVIRUS-TEST-FILE!$H+H*
[without the line break, I put that in so that this email shouldn't
trigger scanners :) ]
--
Stephen White <[EMAIL PROTECTED]>
s for the update servers, and you're updates are
> direct/faster too.
A protocol like rsync, or the provision of patch files, would also
achieve this.
--
Stephen White <[EMAIL PROTECTED]>
-
To unsubscribe, e-mail
7;t actually viruses
anyway but worms, which means there's nothing to disinfect anyway. The
entire executable (and in most cases the email it came in) are the
problem, they're not 'piggybacking' on anything good that you might wa
#x27;t disinfected
properly it would shift some of the reponsibility for the distribution
of the virus onto me. I'm suspect that 90% of mailserver administrators
probably have similar objectives.
--
Stephen White <[EMAIL PROTECTED]>
--
irtual machine in order to reliably pick up polymorphic viruses. I
guess at some stage it'd be nice to write such a beast for clamav, but
I'd imagine that it would require a fair amount of time.
--
Stephen White <[EMAIL PROTECTED]>
---
ine this with 'grep' if you want more control, eg
clamscan --stdout -ri directory/ | grep Klez > klexinfections.txt
--
Stephen White <[EMAIL PROTECTED]>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
0 times. Thanks for the
> information.
Yes. The worm stops spreading after 31 May. See the description on
f-secure.com (among others).
--
Stephen White <[EMAIL PROTECTED]>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For ad
Original Message
> From Fajar Arief Nugraha <[EMAIL PROTECTED]>
> Date: Tuesday, 27 May 2003, 10:37
>
> I'm attaching a zip file (password : "virus") containing a virus
> attachment (joke.exe) which clamav missed during scanning.
> I believe the virus is "Snow White" or "WORM_LOVGATE.B"
rmime or ripmime to decode
> the mail, THEN scanning the actual attachments, WILL work.
clamscan --mbox should work
--
Stephen White <[EMAIL PROTECTED]>
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Original Message
> From Piet Ruyssinck <[EMAIL PROTECTED]>
> Date: Monday, 19 May 2003, 20:15
>
> charm, until today. It seems that clamscan chokes on certain messages,
> doing nothing but eating CPU time. Is it a coincidence, or could this
> new Worm.Palyh.A worm have something to do w
Sorry for the totally screwed up headers in the previous post.
--
Stephen White \ Oxford University Computing Society
System Administrator\ http://ox.compsoc.net/~swhite/
PGP Key ID: 0xC79E5B6A \ <[EMAIL PROTEC
14 matches
Mail list logo
