Skip to main content

Posts

Showing posts with the label clamav
[clamav] submission added source Submission-ID: 3571791 Sender: me Added: Trojan.Kolabc.BFY Virus name alias: Net-Worm.Win32.Kolabc.bfy (Kaspersky AVP)
[clamav] Submission not added source Erk.. somebody else already made it. Submission-ID: 3026528 Sender: me Submission notes: Already detected as Worm.Kolab-284 Added: No Virus name alias: Net-Worm.Win32.Kolabc.sd (Kaspersky AVP), Trojan.Packed.470 (Drweb), Packer.XComp.A (Bitdefender)
[clam-av and nepenthes] Sharuzzaman mentioned to me that instead of using virustotal, we can help clam-av (which however given on Windows, I prefer to use AVG since Clam-av definition considered pretty much obselete), to update clam-av's virus definition. However, if you refer to my previous post, AVG on Linux detect less malware compared to Clam-av. This is awesome! Means that, the new malware that I got from the junkyard in /var/lib/nepenthes, given it was/*they were* signaled by Clam-av as "OK" I must send them straight away. (Well, if you have spare time. Consider this as your social community service ;) ). Though the submission per person restricted only up to TWO files only, you can manually email the personnel to send more than that. Interested to help? Send using this form Sample submission report (both malware accepted), click here Submission-ID: 3434478 Sender: nama aku Added: Trojan.SdBot-8639 Virus name alias: Net-Worm.Win32.Kolabc.aws (Kaspersky AVP), Packer....
Everybody Loves "Ravmon.exe" root@syncronix:/media/disk# clamscan /media/disk/taiping.cpp: OK /media/disk/RavMonE.exe: Worm.RJump-2 FOUND /media/disk/ch9-doubleAreaSelfInput.cpp: OK /media/disk/ch9-height_address.cpp: OK /media/disk/sectionCquiz1.cpp: OK /media/disk/string.pdf: OK /media/disk/bm-and-kmp-cpu.png: OK /media/disk/ch9-doubleArea.cpp: OK /media/disk/bm-kmp.gnu: OK /media/disk/ch9-doubleArea.exe: OK /media/disk/ch9-doubleAreaSelfInput.exe: OK /media/disk/msvcr71.dll: OK /media/disk/classes-lab-exercises.doc: OK /media/disk/RavMonLog: OK /media/disk/lab-exec-b4-finale.doc: OK /media/disk/matrix2.c: OK /media/disk/matrix2.cpp: OK /media/disk/matrix-lab-exec.cpp: OK /media/disk/lab xcersise(1c).cpp: OK ----------- SCAN SUMMARY ----------- Known viruses: 160515 Engine version: 0.91.2 Scanned directories: 1 Scanned files: 19 Infected files: 1 Data scanned: 4.66 MB Time: 7.369 sec (0 m 7 s) root@syncronix:/media/disk# clamscan --remove /media/disk/taiping.cpp: OK /media/...
Nephentes & ClamAV I just installed these stuffs. We'll see what can I do with it. apt-get install clamav.... and look some config in nephentes configuration file :-)