30.07.2012
New database
Database addition: winnow_bad_cw.hdb
Producer: Winnow
Description: md5 hashes of malware attachments acquired directly from a group of botnets
Note: If using Bill Landry's download script, add winnow_bad_cw.hdb to the ss_dbs section of your
clamav-unofficial-sigs.conf file
26.07.2012
INetMsg database removal
Bill Landry (INetMsg) has now moved on to pastures new and as a result, the following databases
will no longer be updated and have been therefore been removed.
INetMsg-SpamDomains-2w.ndb
INetMsg-SpamDomains-2m.ndb
Note: If using Bill Landry's download script, remove INetMsg-SpamDomains-2w.ndb and/or
INetMsg-SpamDomains-2m.ndb
from the ss_dbs section of your clamav-unofficial-sigs.conf file
I'd like to thank Bill for all his time and effort both on his signature work and for producing and maintaining
the excellent download script that a large number of people rely on. Good luck Bill and wish you well!
New databases
Database addition: blurl.ndb
Producer: Sanesecurity
Description: Blacklisted full urls over the last 7 days, covering malware/spam/phishing. URL's added
only when main signatures failed to detect but are know to be "bad".
Note: If using Bill Landry's download script, add blurl.ndb to the ss_dbs section of your
clamav-unofficial-sigs.conf file
Database addition: porcupine.ndb
Producer: Porcupine Signatures
Description: Brazilian e-mail phishing and malware signatures
FP Reports: porcupine.signatures AT gmail.com
Note: If using Bill Landry's download script, add porcupine.ndb to the ss_dbs section of your
clamav-unofficial-sigs.conf file
Database addition: phishtank.ndb
Producer: Porcupine Signatures
Description: Online and valid phishing urls from phishthank.com data feed.
FP Reports: porcupine.signatures AT gmail.com
Note: If using Bill Landry's download script, add phishtank.ndb to the ss_dbs section of your
clamav-unofficial-sigs.conf file
14.02.2012
New databases added to mirrors:
bofhland_cracked_URL.ndb
bofhland_malware_URL.ndb
bofhland_phishing_URL.ndb
New status page added.
And major signature/distribution/downtime issues will be reported
here first, as well
as the usual announcement mailing list.
|
