Hello, The ClamAV team did a great job of getting the signature out for MyDoom.A (SCO.A) virus well before the commercial vendors had signatures. However, yesterday, we started receiving what turns out to be MyDoom.D messages. I submitted a sample at about 9:00AM EST, on 2/10/2004 but am still awaiting a signature to detect MyDoom.D.
My question: I knew there was a new virus on the loose yesterday morning. Is there a way to use a copy of the virus in the wild to generate a temporary signature? I kept watching for updates yesterday but started stripping attachments as a temporary relief measure when I realized how wide spread this had become. So is there a temporary stop-gap measure that we can employ for signature generation for viruses in the wild? Thanks, Kevin -- Kevin M. Myer Systems Administrator Lancaster-Lebanon Intermediate Unit 13 (717) 560-6140 ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users