Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

> We (the users) don't want your signature. We want you to submit an > infected file, so the maintainers can develop a signature. The reason > is simple: we don't trust you. It would be too easy for a malicious > person to contribute a signature that would cause false positives. > > Damian Mens

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

On Sat, 6 Nov 2004, Rishi wrote: If you don't know how to use sigtool to make yourself a new signature, then I guess it's better you don't do it. Creating signatures with sigtool may also violate your virus scanner's license, and is discouraged. I have a Debian machine with clamav and f-prot instal

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

On Sat, 06 Nov 2004 16:01:40 +0100 Thomas Lamy <[EMAIL PROTECTED]> wrote: > Rishi schrieb: > > >>Better submit it through . > >it's>vital for Clamav's detection to get virus samples from it's > >users. > > > > > > > > I did that last week. Any idea how muc

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

Rishi schrieb: Better submit it through . it's vital for Clamav's detection to get virus samples from it's users. I did that last week. Any idea how much time it takes for it to get done? I'm not a sigmaker, but just in case it's some polymorphic one it may t

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

> If you don't know how to use sigtool to make yourself a new signature, > then I guess it's better you don't do it. > Creating signatures with sigtool may also violate your virus scanner's > license, and is discouraged. Sounds scary. :-) However, I can test it on a dummy machine (my workstation

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

> Better submit it through . it's > vital for Clamav's detection to get virus samples from it's users. I did that last week. Any idea how much time it takes for it to get done? I'd like to help the clam community by using sigtool to get this done. Can you p

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

Rishi schrieb: Hi I've been receiving a new virus which f-prot reports as "W32/Kriz.4029.kernel" Can anyone tell me how to use sigtool program to get clamav to use f-prot to figure out how to detect this virus and update the clamav database too? Regards Rishi If you don't know how to use sigtool

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

On Sat, 6 Nov 2004 19:13:25 +0530 Rishi <[EMAIL PROTECTED]> wrote: > Hi > > I've been receiving a new virus which f-prot reports as > "W32/Kriz.4029.kernel" http://www.clamav.net/sendvirus.html -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV

[Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

Hi I've been receiving a new virus which f-prot reports as "W32/Kriz.4029.kernel" Can anyone tell me how to use sigtool program to get clamav to use f-prot to figure out how to detect this virus and update the clamav database too? Regards Rishi ___ h