On Mon, 04 Aug 2003 at 7:24:02 -0700, John Birkhead wrote: > Hi, > Looks like the above worm is making it's way around and we have > received a few copies already. Any idea when the virus db will be updated to > detect this? > > Thanks, > John Birkhead
Are you sure that these copies were [EMAIL PROTECTED] indeed? Was you viruses.db2 updated successfully? The signature of Worm.Mimail.A was added to the db2 about "Sat, 2 Aug 2003 00:20:55 +0200" (with other name: Trojan.Dropper.C). BTW, a simple workaround is _not_ accept mail from "[EMAIL PROTECTED]" (of course replace "your_domain" with the real name of your domain and any other domains you are hosting). This virus sends itself using such sender address. You can also subscribe to [EMAIL PROTECTED] so that you'll be notified about updates of the database. HTH -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/ | ones and zeros. ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users