Re[2]: [vps-mail] New virus signature

[Abigail Marshall <abigail@xxxxxxxxxxxx>]

SW> On Mon, Aug 09, 2004 at 05:31:59PM -0700, Abigail Marshall wrote:

SW> Has anyone here used sigtool before? It seems that it would help a lot
SW> of people to kick back the signature to clamav itself so all those who 
SW> are using clamav would receive the update automatically via normal
SW> mechanisms.

I agree, Scott, and I'm sorry that I didn't think to do that
as well. It happened that I was hit with several instances
of that virus Monday morning, AND that it was very easy to
isolate the code. (I simply viewed the attachment with
Mailwasher -text only - copied the first 5 lines of the
zip attachments into Windows notepad, and saw immediately
that they were identical - so I pulled the signature from
the first line of the zip file ... it took me less than 5
minutes). Obviously, I want to stop a virus in its tracks as
soon as possible, so in this case it was easier for me to
write the recipe (and share it) than to wait for a Clamav
update.

But thanks for the reminder - next time I'll take the time
to also submit the files via the clamav site.

-Abigail

======================================================================
This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
Before posting a question, please search the archives (see above URL).