Mailing List Archive

Update: (daily 74)
ClamAV database updated (2004.01.07 01:37 GMT): daily.cvd, viruses.db2
Version: 74

Submission: n/a
Sender: Farit
Added: VBS.Redlof.Encoded.gen (improved signature from Farit).

Submission: 379-web
Sender: Jean-Christophe Heger
Virus: W95/Hybris.Gen.3
Added: No, W98/Hybris.E detected (by older clamscans).
Note: There was a bug in new snapshots. Jean, thanks for reporting this!

Submission: 380-web, 381-web, 382-web
Sender: Wolf
Virus: Worm/SpyBot.282791, W32/Spybot.GP, W32/Spybot.GB
Added: No, Worm.Sober.C detected.

Submission: 386-web
Sender: Russ Oliver
Virus: worm.gibe.f ??
Added: No, Worm.Gibe.F found.
Note: I also don't know why this message passed through your scanner :-).
Note: To be precise, it's _not_ a virus, just a gif propagated by it.

Submission: 387-web
Sender: Homer Parker
Virus: unknown
Added: No, empty file.

Submission: 389-web
Sender: David Kilzer
Virus: Sober worm variant
Added: No, not a virus. A list of email addresses with some junk.

Submission: 37, 38
Sender: root * mailservice.netopia.pt
Virus: unknown
Added: No, Worm.Mimail.gen found.
Note: Please stop sending via automated way. We receive known samples from you.

Submission: 398-web
Sender: Christoph
Virus: JS.Uniz
Alias: JS/Untzis.1 (Hbedv)
Added: JS.Untz

Submission: 399-web
Sender: Christoph
Virus: Backdoor.Optix.Pro.13
Added: Trojan.Optix.Pro.13

Submission: 400-web
Sender: Christoph
Virus: Backdoor.SdBot.gen and others
Added: Not yet. Queued.

Submission: 401-web
Sender: Christoph
Virus: Win32.HLLP.Savno
Added: W32.Savno

Submission: 402-web
Sender: Christoph
Virus: Worm.P2P.Tanked.13
Alias: W32/KWBot-C (Sophos)
Added: Yes.

Submission: 432-web, 433-web
Sender: Andre Schwaller
Virus: unknown
Added: No, not a virus. Just a list of email addresses, with some junk.

Submission: 435-web
Sender: Eric Rostetter
Virus: unknown
Added: No, this email message is most probably not a "virus".

Submission: 436-web
Sender: René
Virus: JS/Fortnight.gen@M (another variant).
Added: Not yet. Queued.

Submission: 437-web
Sender: Jiri Trnka
Virus: unknown
Added: Trojan.PerfectKeylogger12-dll.UPX

Submission: 439-web
Sender: Dilip M
Virus: Bugbear.b@MM
Added: No, not a virus. A real gif image.

Submission: 39
Sender: n/a
Virus: unknown
Added: No. The same file that was submitted as 439-web.

Submission: 40
Sender: n/a
Virus: unknown
Added: No. Exploit.IFrame.Gen found.

Submission: 445-web
Sender: Wimpy
Virus: Worm/Sober.C1
Added: Worm.Sober.C1

Submission: 446-web
Sender: Lentz Stephane
Virus: W32/Sdbot.worm.gen
Added: Worm.Sdbot.Gen

--
Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only
tomek@lodz.tpsa.pl http://www.lodz.tpsa.pl/ | ones and zeros.
tomek@clamav.net http://www.ClamAV.net/ A GPL virus scanner