> I have 445 (have had it for 5 hours or so) and it still calls it > Trojan.JS.RunMe. Am I missing something? I can see in my > clamd.log where > it picked up the changes and reloaded the database, and sigtool -l lists > both Trojan.JS.RunMe and Worm.Bagle.AI-2 in it. >
I'm going to take a guess here... The RunMe is the HTML part... The Worm... is the executable payload... iirc, clam stops scanning when it sees the first match. HTML would be seen before payload, so that could be what you are seeing. m/ ------------------------------------------------------- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
