ClamAV missing Sobig

[Antony Stone]

On Tuesday 02 September 2003 4:04 pm, Gerry Doris wrote:

> > On Tue, 02 Sep 2003 14:18:22 BST, Antony Stone writes:
> > >No, I mean a machine specifically intended to enable people to find out
> > > what the various anti-virus products make of a particular file.
> > > The whole reason I said I couldn't see the technical way of doing this
> > > yet was because of the "innocent victim" problem.
> >
> > So don't send anything back per mail, but use another channel. I can
> >  imagine the user entering the msg-id in some web-form to see the scan
> >  output. (Of course, the tradeoff would be the used diskspace and
> >  overhead for the webstuff (server and cgi et al).)
> >
> > cheers,
> > &rw
>
> The problem I see is that it would end up being a great service for the
> virus writers.  They could tweak and adjust until they ended up with a
> virus that wasn't detected by the majority of scanners.

In which case we already have a sample of it and can create a ClamAV
signature automatically :) ?

Antony.

--

I vote "no" to this proposal to form a committee to investigate whether we
should or should not hold a ballot on whether to vote yet.