Re: [Clamav-users] Unofficial malware signatures for Clamav

2007-08-20 Thread Arnaud Jacques
Le lundi 20 août 2007 02:17, Bill Landry a écrit : > Arnaud, I see that sd-9798.dedibox.fr has a "A" record that points to > 88.191.56.100, and their is also a "PTR" record for 88.191.56.100 that > points back to sd-9798.dedibox.fr. If this will not change, we can > simple point to sd-9798.dedibo

Re: [Clamav-users] Unofficial malware signatures for Clamav

2007-08-19 Thread Bill Landry
Bill Landry wrote the following on 8/19/2007 1:17 PM -0800: > Arnaud Jacques wrote the following on 8/19/2007 12:10 PM -0800: > >> I uploaded a new version with "VX." prefix. >> >> >>> Arnaud, if you are okay with it, I was thinking about adding VX >>> signature updates to my publicly av

Re: [Clamav-users] Unofficial malware signatures for Clamav

2007-08-19 Thread Steve Basford
Gerard wrote: > I am not sure if Steve has had the time to > upload it to his servers yet. He is quite busy. > Just uploaded the updated script to both domains :) Cheers, Steve ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav

Re: [Clamav-users] Unofficial malware signatures for Clamav

2007-08-19 Thread Bill Landry
Arnaud Jacques wrote the following on 8/19/2007 12:10 PM -0800: > I uploaded a new version with "VX." prefix. > >> Arnaud, if you are okay with it, I was thinking about adding VX >> signature updates to my publicly available download script hosted at >> http://www.sanesecurity.com/clamav/ss-msrb

Re: [Clamav-users] Unofficial malware signatures for Clamav

2007-08-19 Thread Gerard
On Sunday August 19, 2007 at 03:10:41 (PM) Arnaud Jacques wrote: > > Arnaud, if you are okay with it, I was thinking about adding VX > > signature updates to my publicly available download script hosted at > > http://www.sanesecurity.com/clamav/ss-msrbl.txt. I currently provides > > scripted upda

Re: [Clamav-users] Unofficial malware signatures for Clamav

2007-08-19 Thread Arnaud Jacques
Le dimanche 19 août 2007 19:21, Bill Landry a écrit : > Henrik Krohns wrote the following on 8/19/2007 8:34 AM -0800: > > On Sun, Aug 19, 2007 at 05:22:34PM +0200, Arnaud Jacques wrote: > >> Hello Dennis, > >> > >> Le dimanche 19 août 2007 06:03, Dennis Peterson a écrit : > >>> So that your signatu

Re: [Clamav-users] Unofficial malware signatures for Clamav

2007-08-19 Thread Bill Landry
Henrik Krohns wrote the following on 8/19/2007 8:34 AM -0800: > On Sun, Aug 19, 2007 at 05:22:34PM +0200, Arnaud Jacques wrote: > >> Hello Dennis, >> >> Le dimanche 19 août 2007 06:03, Dennis Peterson a écrit : >> >>> So that your signatures are easily discovered in my logs I've prefixed >>

Re: [Clamav-users] Unofficial malware signatures for Clamav

2007-08-19 Thread Arnaud Jacques
Le dimanche 19 août 2007 18:21, Andrew McGlashan a écrit : > Hi, > > Arnaud Jacques wrote: > >> I ask because I see that your download link is a bare IP address, > >> which you may change as much as you want, but I would prefer to use > >> a script with only one address, just like I use with SaneSe

Re: [Clamav-users] Unofficial malware signatures for Clamav

2007-08-19 Thread Andrew McGlashan
Hi, Arnaud Jacques wrote: >> I ask because I see that your download link is a bare IP address, >> which you may change as much as you want, but I would prefer to use >> a script with only one address, just like I use with SaneSecurity >> and MSRBL. > > For now, the IP address is fixed. AFAIK, it w

Re: [Clamav-users] Unofficial malware signatures for Clamav

2007-08-19 Thread Arnaud Jacques
Hello Dennis, Le dimanche 19 août 2007 06:03, Dennis Peterson a écrit : > So that your signatures are easily discovered in my logs I've prefixed > all the virus names with vx so that Backdoor.Win32.LiveList.a becomes > vxBackdoor.Win32.LiveList.a. I'd recommend you do the same - credit > where cre

Re: [Clamav-users] Unofficial malware signatures for Clamav

2007-08-19 Thread Arnaud Jacques
Hello René, Le dimanche 19 août 2007 00:05, René Berber a écrit : > Are you going to setup a general download address, like SaneSecurity? > > I ask because I see that your download link is a bare IP address, which you > may change as much as you want, but I would prefer to use a script with > only

Re: [Clamav-users] Unofficial malware signatures for Clamav

2007-08-18 Thread Dennis Peterson
Arnaud Jacques wrote: > Hello Clamav users, > > With more than 14 official signatures, Clamav's detection rate is > excellent. > However, because of many viruses, trojans, spywares, and other badwares on > the > Wild, SecuriteInfo.com has created its own signatures. > These signatures will

Re: [Clamav-users] Unofficial malware signatures for Clamav

2007-08-18 Thread René Berber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Arnaud Jacques wrote: > Hello Clamav users, > > With more than 14 official signatures, Clamav's detection rate is > excellent. > However, because of many viruses, trojans, spywares, and other badwares on > the > Wild, SecuriteInfo.com has cr

[Clamav-users] Unofficial malware signatures for Clamav

2007-08-18 Thread Arnaud Jacques
Hello Clamav users, With more than 14 official signatures, Clamav's detection rate is excellent. However, because of many viruses, trojans, spywares, and other badwares on the Wild, SecuriteInfo.com has created its own signatures. These signatures will be removed gradually when Clamav will i