On Mon, 26 Jul 2004 at 14:08:21 -0500, Damian Menscher wrote: > On Mon, 26 Jul 2004, Mitch (WebCob) wrote: > > > For one thing, the web interface for uploading could be A LOT MORE USEFUL by > > stating it's current clamscan version, what it detects the upload as, > > selected options/config, and signature database - just allowing easier > > confirmation of relavent settings. > > > > I've downloaded the 0.75, and upgraded, ensured my freshclam is running and > > current, and manually unpacked the zip archive containing the file. > > > > Still don't get a positive scan on my end, though. > > > > Help? Don't want to post the virus publicly of course... what now? > > If it makes you feel any better, I'm in the same situation. > > I *THINK* it *MIGHT* be because mydoom.o has uneven linelengths in the > uuencoding.
Yes, some messages are such. > I know that bug was fixed recently, but there's no note in > the ChangeLog of _when_. So maybe only a CVS version will catch these? > Who knows? > > Frustrated, The faulty encoding of some new worms was mentioned in the thread "Problem detecting Worm.Mydoom.I with strange Mime_base64" last Thursday. To be precise, missing it by ClamAV can't be stated as a bug, as such encoding is illegal. Processing of such encoding was added (I treat is as an additional feature, not as a bugfix). Anyway, the related entry, as shown by Nigel in that thread, is the following: Tue Jul 20 15:38:03 BST 2004 (njh) ---------------------------------- * libclamav: Some MyDoom.I were getting through -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
