From clamav-users-bounces@lists.clamav.net Fri Sep 16 02:07:09 2005 Return-Path: X-Original-To: list@krisma.oltrelinux.com Delivered-To: list@krisma.oltrelinux.com Received: from [127.0.0.1] (krisma [127.0.0.1]) by mail.oltrelinux.com (Postfix) with ESMTP id E0EE411B205; Fri, 16 Sep 2005 02:06:59 +0200 (CEST) X-Original-To: clamav-users@krisma.oltrelinux.com Delivered-To: clamav-users@krisma.oltrelinux.com Received: from web50515.mail.yahoo.com (web50515.mail.yahoo.com [206.190.39.113]) by mail.oltrelinux.com (Postfix) with SMTP id 162CD11B1FC for ; Fri, 16 Sep 2005 02:06:54 +0200 (CEST) Received: (qmail 63800 invoked by uid 60001); 16 Sep 2005 00:06:49 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=baN/AA8FfcpF1h5QfLo2wjqHJ83A4O/OVujG3ZRpAezWxluIay5E9lw8XO6nDgL/Y/cP8nzelGkQhFKcqQYMmAYeRhHoffe9sziNreAJ+LJobrR1Anmw48Eb8VJL3PBSNlXJQgjKecNreUuImi2QkKKLo+IQodDLDaY59o5AW4A= ; Message-ID: <20050916000649.63798.qmail@web50515.mail.yahoo.com> Received: from [66.129.224.36] by web50515.mail.yahoo.com via HTTP; Thu, 15 Sep 2005 17:06:49 PDT Date: Thu, 15 Sep 2005 17:06:49 -0700 (PDT) From: Joanna Roman Subject: Re: [Clamav-users] Spyware detection... To: ClamAV users ML In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-BeenThere: clamav-users@lists.clamav.net X-Mailman-Version: 2.1.5 Precedence: list Reply-To: ClamAV users ML List-Id: ClamAV users ML List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: clamav-users-bounces@lists.clamav.net Errors-To: clamav-users-bounces@lists.clamav.net X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at krisma.oltrelinux.com X-Spam-Status: No, hits=0.0 tagged_above=-999.0 required=6.0 tests=BAYES_50, RCVD_IN_SORBS_WEB X-Spam-Level: --- "Christopher X. Candreva" wrote: > On Mon, 12 Sep 2005, Stephen J. Smoogen wrote: > > > I am currently looking at doing the same thing. I > have a set of boxes > > that I am planning to 'infect' with spyware and > then start making > > signatures for them. It is a rather slow process > at the moment.. > > There doesn't seem to be any reason a separate > project couldn't provide a > signature package that worked with Clam to look for > Spyware (or Spam, or > anti-Brady Bunch messages, or whatever for that > matter). > > -Chris > > ========================================================== > Chris Candreva -- chris@westnet.com -- (914) > 967-7816 > WestNet Internet Services of Westchester > http://www.westnet.com/ > _____________________________________________ > http://lurker.clamav.net/list/clamav-users.html > Whoever is about to submit the spywares, may I ask whether those spywares come in via port 80 or port 21 ? __________________________________ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com _______________________________________________ http://lurker.clamav.net/list/clamav-users.html