Thanks for the clarification!

I'm a ClamAV newbie and I'm not sure how to map virus names across different
vendors. :-)

Mmmmmm. I have seen this virus reported being received in the last several
days by our mail gateway but I didn't know that this was [EMAIL PROTECTED] (as
named by Symantec).

The interesting thing is that my Symantec-protected Exchange server reported
receiving a message on Sunday evening (after the ClamAV virus update
performed on Friday) so I'm concerned that somehow the virus made it's way
through our defenses.





Thanks,
John

-----Original Message-----
From: Daniel J McDonald [mailto:[EMAIL PROTECTED]
Sent: Monday, August 04, 2003 7:38 AM
To: [EMAIL PROTECTED]
Subject: Re: [Clamav-users] Signature for [EMAIL PROTECTED] available?


On Mon, 2003-08-04 at 09:24, John Birkhead wrote:
> Hi,
>       Looks like the above worm is making it's way around and we have
> received a few copies already. Any idea when the virus db will be updated
to
> detect this?

It was released on Friday - it's listed as Trojan.Dropper.C
I've picked up a few of them:
[EMAIL PROTECTED] mcdonalddj]$ sudo grep -o -E 'INFECTED.+\)'
/var/log/mail/info |
sort | uniq -c
      1 INFECTED (Exploit.IFrame)
      1 INFECTED (Exploit.IFrame.HTML, Worm.BugBear.B)
      5 INFECTED (Trojan.Dropper.C)
      1 INFECTED (W32/Yaha.g.dam)
      2 INFECTED (Worm.BugBear.B)

-- 
Daniel J McDonald, CCIE 2495, CNX
Austin Energy




-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to