From clamav-users-bounces@lists.clamav.net Mon Sep 12 05:13:45 2005 Return-Path: X-Original-To: list@krisma.oltrelinux.com Delivered-To: list@krisma.oltrelinux.com Received: from [127.0.0.1] (krisma [127.0.0.1]) by mail.oltrelinux.com (Postfix) with ESMTP id D881011B299; Mon, 12 Sep 2005 05:13:37 +0200 (CEST) X-Original-To: clamav-users@krisma.oltrelinux.com Delivered-To: clamav-users@krisma.oltrelinux.com Received: from U15187375.cubiclesoft.com (u15187375.onlinehome-server.com [217.160.255.148]) by mail.oltrelinux.com (Postfix) with ESMTP id C929711B253 for ; Mon, 12 Sep 2005 05:13:32 +0200 (CEST) Received: from [192.168.0.101] ([24.11.219.211]) by cubiclesoft.com with MailEnable ESMTP; Sun, 11 Sep 2005 23:13:29 -0400 Message-ID: <4324F2D2.5010206@cubiclesoft.com> Date: Sun, 11 Sep 2005 23:15:30 -0400 From: Thomas Hruska User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317) X-Accept-Language: en-us, en MIME-Version: 1.0 To: ClamAV users ML Subject: Re: [Clamav-users] Spyware detection... References: <4324E2EB.60505@cubiclesoft.com> <52133.192.168.1.2.1126492117.squirrel@inetnw.com> In-Reply-To: <52133.192.168.1.2.1126492117.squirrel@inetnw.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: clamav-users@lists.clamav.net X-Mailman-Version: 2.1.5 Precedence: list Reply-To: ClamAV users ML List-Id: ClamAV users ML List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: clamav-users-bounces@lists.clamav.net Errors-To: clamav-users-bounces@lists.clamav.net X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at krisma.oltrelinux.com X-Spam-Status: No, hits=0.0 tagged_above=-999.0 required=6.0 tests=BAYES_50 X-Spam-Level: Dennis Peterson wrote: > Thomas Hruska said: > >>I hate to crosspost, but since it appears no one reads the Win32 list, I >>switched my subscription to the main users list. > > > Everything you require can be found at Google. As you observed, ClamAV is > not in the spyware detection business. > > dp No it can't because I've spent the past two days searching Google going through thousands of results. The tool I'm looking for needs to be: 1) Command-line driven. 2) Reputable and well-received. 3) Writes its output to stdout. 4) Has a decent set of command line options. 5) Scans for spyware. 6) Has the option to only detect the existence of spyware, not remove it. ClamAV is the closest thing I've found...only it doesn't do spyware detection. I'm asking for detection only, not removal. Since virus writers and spyware vendors (companies who specialize in writing spyware) produce binaries, and since signatures can be gathered from binaries, ClamAV seems like the tool I want. Only problem is that it doesn't detect spyware vendor binaries. I could care less if someone made a custom spyware solution for their application as long as the major vendors are detected. -- Thomas Hruska _______________________________________________ http://lurker.clamav.net/list/clamav-users.html