On Monday, August 25, 2003 8:57 PM, Butch Evans wrote:
> I am not sure if this is the same one, but my uvscan has detected
> what it calls "Sobig.f.dam" and this is missed by clamav.  I will
> try to get a sample of the file, but do not have one at this time.

I submitted a new Sobig-f signature a couple days ago that detects
complete and damaged SoBig-F's -- this is especially common with mail
bounces, which Sobig generates *a lot* of.  I haven't received any
feedback on it, so here it is:

W32/Sobig.F=272156774070d0772fb22d86ea94b6d91b688e6da16fcc6bd7111305c9af
66c62b159448b0753c821a4b4d51



--
Jay Swackhamer <[EMAIL PROTECTED]>
Nebularis Inc <http://www.nebularis.com>
Tel: 1-613-843-9358  Fax: 1-613-825-5960



-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to