On Mon, 26 Jul 2004 at 17:28:21 +0100, Mike Brodbelt wrote: > > I got a suspicious mail this morning which looked very like a virus, and > I'm now receiving reports from a neighbouring institution that they are > getting hit with the same thing. It is rumored to be a new variant of > Bagle, though noting I have picks it up yet. [...] > > Has anyone else seem this? I've submitted it to the ClamAV database, and > received a "thank you" note, telling me the submission has not been > added, and giving no information as to why not, which is less helpful > than I'd have hoped... The online scanner does not currently pick it up.
The update was on its way. Then: $ clamscan -m 11582. 11582.: Worm.Mydoom.M FOUND (11582. is the file submitted by you). We got very many samples of this and - working in the hurry - we had no time to give long explanation in each response. In fact, the signature has been added, though not exactly from your submission, that's why the note looked that way. I want to take an opportunity and say "thank you" from the ClamAV Team to all who submit samples to us! > Is there a way I can manually extract a signature to add to my local > database, if ClamAV won't do it? Of course. It's described in signatures.pdf. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
