RE: New Trojan on the block [CIA Trojan]

Davis, Myron to me:

> I don't know where you generated the list, ...

Experience, web searching and huge contact with those that need help...

> ... but please add clamav (the open
> source virus definitions) to that list.
> 
> http://www.clamav.net/sendvirus.html
> 
> There are a lot of people using the windows (http://clamwin.net) and unix
> ports of this GPL scanner.

There may well be a "lot" by some arbitrary measure of "lot-ness" but 
ClamAV is neither "well-known" nor "widely used" in my experience.

Further, in my _professional opinion_ it is currently grossly 
technically inadequate, so no matter how popular it is by some or other 
measure of such, suggesting it is a good tool and folk should use it is 
just like claiming that wearing copper bracelets improves arthritis or 
that homeopathy "works".

And don't even get me started on the theft of IP from other, non-GPL, 
non-public domain efforts that has gone into the development of its 
"signature database" to date...


-- 
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854

_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions