[Clamav-users] Mydoom.F not in my virus defs...

[Kevin Hanser]

Title: Message

I've recently been asked if our virus scanner (clamav) detects the latest mydoom, Mydoom.F.  I've seen other messages on this and the mailscanner list that indicate that it does, but I've been unable to confirm it myself yet.

 

If I do: sigtool --list-sigs | grep -i mydoom

I get:

Worm.Mydoom.B
Worm.Mydoom.B-dll
Worm.Mydoom.E
Worm.Mydoom.E-unp
Worm.MyDoom.E.UPX

Is one of those MyDoom variants actually MyDoom.F (or is it called something else)? 

 

I checked my maillog, and it looks like my ClamAV is keeping up to date:

Feb 26 08:01:06 pluto ClamAV-autoupdate[7919]: ClamAV updated

Thanx!

 

k