From clamav-users-bounces@lists.clamav.net Mon Sep 12 06:12:27 2005 Return-Path: X-Original-To: list@krisma.oltrelinux.com Delivered-To: list@krisma.oltrelinux.com Received: from [127.0.0.1] (krisma [127.0.0.1]) by mail.oltrelinux.com (Postfix) with ESMTP id 1DC5A11B3C0; Mon, 12 Sep 2005 06:12:22 +0200 (CEST) X-Original-To: clamav-users@krisma.oltrelinux.com Delivered-To: clamav-users@krisma.oltrelinux.com Received: from U15187375.cubiclesoft.com (u15187375.onlinehome-server.com [217.160.255.148]) by mail.oltrelinux.com (Postfix) with ESMTP id 48ADB11B2AE for ; Mon, 12 Sep 2005 06:12:16 +0200 (CEST) Received: from [192.168.0.101] ([24.11.219.211]) by cubiclesoft.com with MailEnable ESMTP; Mon, 12 Sep 2005 00:12:13 -0400 Message-ID: <43250096.7040909@cubiclesoft.com> Date: Mon, 12 Sep 2005 00:14:14 -0400 From: Thomas Hruska User-Agent: Mozilla Thunderbird 1.0.2 (Windows/20050317) X-Accept-Language: en-us, en MIME-Version: 1.0 To: ClamAV users ML Subject: Re: [Clamav-users] Spyware detection... References: <4324E2EB.60505@cubiclesoft.com> <52133.192.168.1.2.1126492117.squirrel@inetnw.com> <4324F2D2.5010206@cubiclesoft.com> <52188.192.168.1.2.1126495784.squirrel@inetnw.com> In-Reply-To: <52188.192.168.1.2.1126495784.squirrel@inetnw.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: clamav-users@lists.clamav.net X-Mailman-Version: 2.1.5 Precedence: list Reply-To: ClamAV users ML List-Id: ClamAV users ML List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: clamav-users-bounces@lists.clamav.net Errors-To: clamav-users-bounces@lists.clamav.net X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at krisma.oltrelinux.com X-Spam-Status: No, hits=0.0 tagged_above=-999.0 required=6.0 tests=BAYES_50 X-Spam-Level: Dennis Peterson wrote: > Thomas Hruska said: > >>Dennis Peterson wrote: >> >>>Thomas Hruska said: >>> >>> >>>>I hate to crosspost, but since it appears no one reads the Win32 list, I >>>>switched my subscription to the main users list. >>> >>> >>>Everything you require can be found at Google. As you observed, ClamAV >>>is >>>not in the spyware detection business. >>> >>>dp >> >>No it can't because I've spent the past two days searching Google going >>through thousands of results. > > > Google has told you what you need - the tool you are after does not exist. > > dp Thank you but I already know the tool doesn't exist or I wouldn't be wandering around this forum. Since the tool doesn't exist, I found the _closest_ possible tool to the tool I am looking for and ClamAV happens to be that tool. You should be proud that your tool is just shy of being able to do something system administrators around the world want to be able to do. Imagine the joy a sysadmin could experience by being able to remotely scan a thousand plus machines on the LAN, and, in a matter of 30 minutes, know which ones have spyware or have a virus installed all from one tool. Now I know this isn't what ClamAV was designed for, but that's the sort of thing you have to expect from software and users - the unexpected but creative uses for a product. Given that it should only take a week or two to gather signatures from the various spyware vendor binaries, I don't see why you all are so adamant about not adding rudimentary detection. To me, spyware is a virus. The only difference is that it wreaks havoc on the human psyche instead of wreaking havoc on binary data. -- Thomas Hruska _______________________________________________ http://lurker.clamav.net/list/clamav-users.html