> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:clamav-users- > [EMAIL PROTECTED] On Behalf Of Niek > Sent: 15. april 2004 13:36 > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] new virus (?): "automatically scanned for > viruses using xxx" > > Fajar A. Nugraha wrote: > > > I see some occurences of emails containing compressed attachment, > > not detected by ClamAV, all claiming to be > > > > As I don't use M$ Win, I don't know what it does exactly. > > Anybody else got these? Or perhaps some other vendor already detect > this? > > > > Sounds like a bagle variant. The attachment could be a RAR archive. >
I've reviewed the submission and it's a variant of Nyxem aka MyWife aka Blackmal. Perfect example on how the AV-industry doesn't coordinate the naming of new viruses. ClamAV calls this family Nyxem (the name used by Kaspersky). Signature added through daily.cvd version 264 (ref. update announcement for further details). Best regards, Diego d'Ambra
smime.p7s
Description: S/MIME cryptographic signature