Henrik K wrote: > On Wed, Apr 09, 2008 at 04:49:17PM +0200, aCaB wrote: >> Henrik K wrote: >>> On Wed, Apr 09, 2008 at 03:53:16PM +0200, aCaB wrote: >>>> Henrik K wrote: >>>>>> But I have another one, also without PUA ;-) >>>>>> http://www.beta.wetter.com/lib/js/1d7c7a52.js --> >>>>>> Trojan.Downloader.JS.Agent-2 >>>>>> This is also a "ajax - jquery - lib" from a popular, german - website. >>>>> I can confirm too that Trojan.Downloader.JS.Agent-2 (and 1) hit a load of >>>>> legimate sites. Haven't bothered to report since noone has complained that >>>>> surfing is affected. >>>> Guys, >>>> You should update your virus db more often. >>>> This has been fixed 2 days ago. >>> What makes you think we don't? >> Mostly the fact that there's currently no signature for >> Trojan.Downloader.JS.Agent-2. > > It was removed 2 days ago? Ah well, bug hunting on the reload code then..
If you find something please open a ticket on the bugzilla which you can find at http://bugs.clamav.net Thanks, -aCaB _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html