This is because the Sasser worm doesn't spread through E-Mail. The ID
is there so that you can scan for the file AVSERVE2.EXE. The
identification is included primarily for those folks that scan Windoze
machines via Samba.
Regards,
Mike
--- Begin Message ---
I know that Clamav has signatures in t
Clamd is a daemon that runs in the background and is called by
clamdscan. This saves lots of time on scanning and drastically reduces
CPU load and memory usage.
Clamscan is the "one off" version of this. It doesn't use clamd and
therefore must load the virus database every time it runs.
Use cla
No, you just need to start clamd as a background daemon and then run
clamdscan in place of clamscan. As far as I know clamdscan is 100%
command line compatible with clamscan, so the only thing to worry about
is to make sure clamd stays up.
Regards,
Mike
--- Begin Message ---
> Use c
Why not just do what I've been working on. Just set up a procmail rule
that runs freshclam whenever you get a message from the clamav-virusdb
list. It should work just as good as the clamav team sending you a
virusdb "push" every time the database is updated.
Regards,
Mike
Mike
:0
* ^X-BeenThere:[EMAIL PROTECTED]
| nice -n 5 /usr/local/bin/freshclam --quiet
This one should work...not certain, but that's as far as I've gotten so
far...
Regards,
Mike
--- Begin Message ---
At 18:53 16/08/2004, Mike Robinson wrote:
Why not just do what I've been working on.
basis
right now.
Regards,
Mike
--- Begin Message ---
On Mon, 2004-08-16 at 19:53, Mike Robinson wrote:
> Why not just do what I've been working on. Just set up a procmail rule
> that runs freshclam whenever you get a message from the clamav-virusdb
> list. It should work just as good as
I've tried submitting a new Mytob variant over the last 2 days (still
not being detected by ClamAV) and I've still not got a responseI
submitted these online...I got the confirmation pages, but no messages
afterward...I can still submit the email, zip, or the included pif to
the online scanner
Erik Corry wrote:
> On Tue, Jan 24, 2006 at 06:40:12PM -0500, Mike Robinson wrote:
>
>> I've tried submitting a new Mytob variant over the last 2 days (still
>> not being detected by ClamAV) and I've still not got a responseI
>>
>
> The foll
Jason Haar wrote:
> Dennis Peterson wrote:
>
>> What methodology are you using to create these? It looks
>> like an opportunity for collaboration if there's a way
>> to avoid dupes.
>>
>>
> If signature development is truly getting bogged down, perhaps more
> official people are needed?
Diego d'Ambra wrote:
> Erik Corry wrote:
>> On Wed, Jan 25, 2006 at 01:19:58PM -0500, Mike Robinson wrote:
>> > Erik Corry wrote:
>> > >
>> > > The following signature seems to detec the Mytob variants on my
>> system:
>> > &g
10 matches
Mail list logo
