> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:clamav-users-
> [EMAIL PROTECTED] On Behalf Of vlad
> Sent: 15. januar 2004 10:55
> To: Trog
> Subject: Re: [Clamav-users] paypal trojan
> 
> Hello Trog,
> 
> Thursday, January 15, 2004, 2:23:33 PM, you wrote:
> 
> T> Hi all,
> 
> T> Have submitted a sample of an email message doing the rounds
purporting
> to be
> T> from paypal and containing a zip file with an executable in it.
> 

It has been added as Trojan.Dropper.Mimail.P. For further info see
announcement sent to [EMAIL PROTECTED]

> ----------- SCAN SUMMARY -----------
> Known viruses: 40202

The number of viruses in the DB should be around 20100. You might want
to check if you have extra .db files (links) in the ClamAV
virus-database directory.

> X-AMaViS-Alert: INFECTED, message contains virus: Worm.Mimail.J

The virus Mimail.P looks and behaves almost as Worm.Mimail.J. When we
received the first copy of Worm.Mimail.P, we actually named it
Worm.Mimail.J thinking it was some sort of variant. Later when other
av-scanners started to detect it the name for this variant was changed
to Worm.Mimail.P.

Best regards,
Diego d'Ambra

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to