On Tue, 20 Jul 2004 16:23:21 -0400 "henry j. mason" <[EMAIL PROTECTED]> wrote:
> correctly in passing these messages, right? i can't
> think of any reasonable way to stop them, as they
> seem to follow the Bagle pattern of using many different
> patterns for the message and attachment filenames.
You can use this signature (the latest CVS version is required):
Worm.Bagle.AG-empty
(Clam)=7372633d226369643a{-8000}436f6e74656e742d547970653a206170706c696
36174696f6e2f6f637465742d73747265616d3b206e616d653d{40-130}2d2d2d2d2d2d
2d2d2d2d
Just copy the attached file to DatabaseDirectory and tell clamd to
reload the database (killall -USR2 clamd)
--
oo ..... Tomasz Kojm <[EMAIL PROTECTED]>
(\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg
\..........._ 0DCA5A08407D5288279DB43454822DC8985A444B
//\ /\ Tue Jul 20 23:03:25 CEST 2004
bagle-empty.db
Description: Binary data
pgpGNVTLzCvMV.pgp
Description: PGP signature
