On Mon, 09 Aug 2004 16:44:23 -0500 Steven Stern <[EMAIL PROTECTED]> wrote:
> On Mon, 9 Aug 2004 11:03:27 -0700 (PDT), Scott Call > <[EMAIL PROTECTED]> wrote: > > >I'm seeing a huge quantity of "Trojan.JS.RunMe" both with 0.75.1 and > >the latest snapshot. I can't seem to find any information on this > >signature (nothing in the virusdb list and nothing on google). > > > > As usual, ClamAV's name came out too soon.... The standard naming > seems to be > > [EMAIL PROTECTED] [Symantec] > W32/[EMAIL PROTECTED] [McAfee], > WORM_BAGLE.AC [Trend], > Win32.Bagle.AG [Computer Associates] We call it Worm.Bagle.AI, only the HTML part is called Trojan.JS.RunMe. -- oo ..... Tomasz Kojm <[EMAIL PROTECTED]> (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Tue Aug 10 00:34:08 CEST 2004
pgpdkFteGrcoK.pgp
Description: PGP signature
