On Wed, Apr 09, 2008 at 03:26:48PM +0200, Alexander Siebnich wrote: > Arnaud Jacques schrieb: > > At the moment, PUA should not be used in production environment. > > See FAQ (http://www.clamav.org/support/faq/) for details. > > > Thank you for this advice. I just wondered that this problem only > occured since the last main.cvd - update, but we can change this. > > But I have another one, also without PUA ;-) > http://www.beta.wetter.com/lib/js/1d7c7a52.js --> > Trojan.Downloader.JS.Agent-2 > This is also a "ajax - jquery - lib" from a popular, german - website.
I can confirm too that Trojan.Downloader.JS.Agent-2 (and 1) hit a load of legimate sites. Haven't bothered to report since noone has complained that surfing is affected. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html