HTTP Anti-Virus Proxy

Official HAVP Support Forum
Registration disabled, I'm tired of spambots. E-mail havp@hege.li if you have questions.
HAVP project is pretty much frozen/abandoned at this time anyway.
It is currently 22 Jun 2014 09:52

All times are UTC + 2 hours [ DST ]




Post new topic Reply to topic  [ 5 posts ] 
Author Message
 Post subject: Spyware
PostPosted: 12 Jun 2006 16:50 
Offline

Joined: 12 Jun 2006 16:42
Posts: 8
Hi,

Is any one using HAVP to catch spyware/malware. Ideally HAVP should allow an unpatched IE user to browse with out getting all the spyware and other nasties getting installed with out their knowledge. Any one working in this direction?

Also how many virus do you catch daily/weekly?

regards,

raj


Top
 Profile  
 
 Post subject:
PostPosted: 12 Jun 2006 17:06 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
Not all scanners have signatures for spyware/adware. If you would like the ideal situation, you should atleast have 2 scanners in HAVP, and third at workstation (and probably even run something like Ad-Aware daemon too).

But honestly, I don't think it's such a big deal. At work we have 500+ users, and I see maybe 2-5 viruses (mostly some javascript stuff) each week in log. Or perhaps our workers are well behaving and not surfing in bad places. :)

Cheers,
Henrik


Top
 Profile  
 
 Post subject:
PostPosted: 12 Jun 2006 17:25 
Offline

Joined: 12 Jun 2006 16:42
Posts: 8
hege wrote:
Not all scanners have signatures for spyware/adware.


:( Actually I am thinking about having a spyware sig database for ClamAV. This will be very usefull with HAVP.

Quote:
we have 500+ users, and I see maybe 2-5 viruses (mostly some javascript stuff)


This was what I expected, virus as such is not a threat for a browser, but malware is. I know HAVP cannot do any thing about it, but HAVP can benefit enormously from having a good spyware sig for ClamAV!

raj


Top
 Profile  
 
 Post subject:
PostPosted: 12 Jun 2006 17:45 
Offline
HAVP Developer

Joined: 27 Feb 2006 18:12
Posts: 687
Location: Finland
raj2569 wrote:
Actually I am thinking about having a spyware sig database for ClamAV. This will be very usefull with HAVP.


I think many people have had the same idea, but nothing has come up yet. It would require lots of skilled people and spare time. You could do something like simple md5-signatures of installers, but I don't know how far that would lead..

Good luck. :)

Cheers,
Henrik


Top
 Profile  
 
 Post subject:
PostPosted: 13 Jun 2006 18:34 
Offline

Joined: 12 Jun 2006 16:42
Posts: 8
Thanks :)

I am actually thinking on the line of having a clam av sig to identify browser help objects and other nasties let the users use white lists to add what they want. Don't know how far this will go but I am determined to give it a good push! :)

raj


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 5 posts ] 

All times are UTC + 2 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group