Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

2008-04-02 Thread Dennis Peterson
Jan-Pieter Cornet wrote: > On Wed, Apr 02, 2008 at 10:50:59AM -0700, Dennis Peterson wrote: >> Arthur Sherman wrote: I use scripts now to monitor user space for new php code. >>> Could you share these scripts? >> On a Solaris system you can use the built-in aset tool, and for any >> Unix/Linu

Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

2008-04-02 Thread Arthur Sherman
> >> I use scripts now to monitor user space for new php code. > >> > >> dp > > > > > > Could you share these scripts? > > On a Solaris system you can use the built-in aset tool, and > for any Unix/Linux system you can use trip-wire or Cfengine. > > dp Thanks! Best, -- Arthur Sherman ___

Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

2008-04-02 Thread Jan-Pieter Cornet
On Wed, Apr 02, 2008 at 10:50:59AM -0700, Dennis Peterson wrote: > Arthur Sherman wrote: > >> I use scripts now to monitor user space for new php code. > > Could you share these scripts? > > On a Solaris system you can use the built-in aset tool, and for any > Unix/Linux system you can use trip-w

Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

2008-04-02 Thread Dennis Peterson
Arthur Sherman wrote: >> I've had to repair or replace a number of "Contact Us" and >> feedback type php scripts that were incredibly easy to >> exploit and in fact actually were exploited. More than once >> one of my own systems was spewing spam from badly crafted web >> pages. Many of these w

Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

2008-04-01 Thread Arthur Sherman
> I've had to repair or replace a number of "Contact Us" and > feedback type php scripts that were incredibly easy to > exploit and in fact actually were exploited. More than once > one of my own systems was spewing spam from badly crafted web > pages. Many of these would never be found except

Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

2008-04-01 Thread Dennis Peterson
John Rudd wrote: > What Unix-like systems have going for them IS NOT privilege separation, > it is that the *nix culture is much more aggressive/responsive when it > comes to generating patches for vulnerabilities ... getting them out > more frequently than Windows service packs. But that depe

Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

2008-04-01 Thread Gerard
On Tue, 01 Apr 2008 10:47:39 -0400 "David F. Skoll" <[EMAIL PROTECTED]> wrote: > Jan-Pieter Cornet wrote: > > > Why go through all the trouble of creating a linux virus, when there > > are tons of readily exploitable php out there? > > Like I said, because of the publicity value. There are some

Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

2008-04-01 Thread John Rudd
David F. Skoll wrote: > The Morris worm did not propagate via file sharing or e-mail; That's not entirely true. The Morris worm used multiple techniques to infiltrate a system, one of which was a common "hole" that sendmail systems used which allowed an external sender to specify a file or pr

Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

2008-04-01 Thread David F. Skoll
Jan-Pieter Cornet wrote: > Why go through all the trouble of creating a linux virus, when there > are tons of readily exploitable php out there? Like I said, because of the publicity value. There are some virus writers out there who do it for the "fame". Regards, David. ___

Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

2008-04-01 Thread Jan-Pieter Cornet
On Tue, Apr 01, 2008 at 08:38:26AM -0400, David F. Skoll wrote: > > I am absolutely certain that, once there's a market for it, > > non-windows viruses will appear. > > There *is* already a huge market for a Linux virus. The market is different > from the Windows market. In the Windows world, th

Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

2008-04-01 Thread David F. Skoll
Steve Holdoway wrote: > Well, ignoring the ensuing flame war as to whether a worm is a virus > ( it certainly is in this context! ), the first ever virus was unix > based. Actually, I believe CHRISTMA EXEC predated the Morris worm, and that was on IBM System/370. http://en.wikipedia.org/wiki/Chri

Re: [Clamav-users] Non-Windoze Viruses

2008-04-01 Thread Bernd Petrovitsch
On Die, 2008-04-01 at 16:21 +1300, Steve Holdoway wrote: [...] > Well, ignoring the ensuing flame war as to whether a worm is a virus > ( it certainly is in this context! ), the first ever virus was unix > based. And Microsoft Windows hadn't been invented yet. Or linux. But the Unix world learned

Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

2008-03-31 Thread Steve Holdoway
On Mon, 31 Mar 2008 23:01:10 -0400 "David F. Skoll" <[EMAIL PROTECTED]> wrote: > I do not believe there has been a real Linux virus in the wild, and > I can't believe someone wouldn't have created one by now if it were > as easy as on Windoze. Heck, even MSFT has probably tried as part > of it's

[Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

2008-03-31 Thread David F. Skoll
Steve Holdoway wrote: [Regarding viruses on Linux/UNIX] > Because, it *IS* going to change, just as soon as the market share > makes it profitable. No question about it. People have been saying that for a long time, but I have my doubts. Linux/UNIX is a different environment, with more strongly-