Tomasz Kojm wrote:

On Fri, 30 Jul 2004 11:17:06 +0200
Giorgio Bellussi <[EMAIL PROTECTED]> wrote:



Good day all.
Online scanner http://www.gietl.com/test-clamav/ doesn't recognize mabutu.a (same way as clamav-0.75)
The same file results infected at
http://www.kaspersky.com/scanforvirus (*I-Worm.Mabutu.a)*
and
h <http://www.ravantivirus.com/scan/indexn.php>ttp://www.ravantivirus.c
om/scan/indexn.php.
<http://www.ravantivirus.com/scan/indexn.php>(Win32/HLLW.Mabutu.B).


clamav-devel-20040728 recognizes it as Worm.Mabutu.A-upx.



This must be some other, re-packed variant. Please submit it on our website so we can add a new signature for older clamav versions.



I (re)tried just now and I got:
--------------
Result:

This virus is *already recognized* by clamscan / ClamAV version devel-20040726 as Worm.Mabutu.A-upx . Be careful when submitting samples and remember to run freshclam!

Please correct the above errors and retry.
--------------

BTW: the online scanner reports again:

---------
File is valid, and was successfully uploaded.



clamav scans the file ...

Clamav-Output:

/tmp/phpfrnKvL: OK


Clamav DID NOT identify your sample as malicious content ---------

Regards.

G





-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to