Re: [Clamav-users] WORM_Netsky.DAM & WORM_BAGZ.C not being caught

2005-06-02 Thread Fajar A. Nugraha
ramya wrote: I have the mails quarantined and decoded all of them contained different zip files. There where 5 occurrences. [snip] As per us suggestion i did test the mails. They all came through clean. I am unable to zip the file. You don't have to. Just submit the original, quarantined,

Re: [Clamav-users] WORM_Netsky.DAM & WORM_BAGZ.C not being caught

2005-06-02 Thread Tomasz Kojm
On Thu, 02 Jun 2005 15:25:48 +0530 ramya <[EMAIL PROTECTED]> wrote: > These two viruses are being caught on servers by other scanners.. but > not by ClamAV.. Can anyone explain this to me?? .DAM is an abbreviation for "damaged". -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\

Re: [Clamav-users] WORM_Netsky.DAM & WORM_BAGZ.C not being caught

2005-06-02 Thread ramya
I have the mails quarantined and decoded all of them contained different zip files. There where 5 occurrences. Since you have the files, why don't you test them on http://test-clamav.power-netz.de/, and upload the sample to http://www.clamav.net/sendvirus.html ? Regards, Fajar As per us

Re: [Clamav-users] WORM_Netsky.DAM & WORM_BAGZ.C not being caught

2005-06-02 Thread Fajar A. Nugraha
ramya wrote: I have the mails quarantined and decoded all of them contained different zip files. There where 5 occurrences. Since you have the files, why don't you test them on http://test-clamav.power-netz.de/, and upload the sample to http://www.clamav.net/sendvirus.html ? Regards, Faja

Re: [Clamav-users] WORM_Netsky.DAM & WORM_BAGZ.C not being caught

2005-06-02 Thread ramya
I have the mails quarantined and decoded all of them contained different zip files. There where 5 occurrences. Now i would like to generate the signature before this issue gets resolved. When i try to unpack, i am unable to do the same. unzip abuse_list.zip Archive: abuse_list.zip End-of-cen

Re: [Clamav-users] WORM_Netsky.DAM & WORM_BAGZ.C not being caught

2005-06-02 Thread ramya
restart clamd! Ofcourse i did restart.. Thanks and regards Ramya Krishnan ** DISCLAIMER ** Information contained and transmitted by this E-MAIL is proprietary to Sify Limited and is intended for use only by the individual or entity to which it is addressed, and may conta

Re: [Clamav-users] WORM_Netsky.DAM & WORM_BAGZ.C not being caught

2005-06-02 Thread Odhiambo Washington
* ramya <[EMAIL PROTECTED]> [20050602 13:03]: wrote: > WORM_BAGZ.C is now being caught, but still WORM_Netsky.DAM is a problem. > I have enabled both ScanPE and DetectBrokenExecutables. And i am running > 0.85.1 > clamdscan -V > ClamAV 0.85.1/906/Thu Jun 2 03:08:56 2005 restart clamd! -Wash

Re: [Clamav-users] WORM_Netsky.DAM & WORM_BAGZ.C not being caught

2005-06-02 Thread ramya
WORM_BAGZ.C is now being caught, but still WORM_Netsky.DAM is a problem. I have enabled both ScanPE and DetectBrokenExecutables. And i am running 0.85.1 clamdscan -V ClamAV 0.85.1/906/Thu Jun 2 03:08:56 2005 Thanks Ramya Niek wrote: On 6/2/2005 11:55 AM +0200, ramya wrote: These two viruses

Re: [Clamav-users] WORM_Netsky.DAM & WORM_BAGZ.C not being caught

2005-06-02 Thread Trog
On Thu, 2005-06-02 at 15:25 +0530, ramya wrote: > These two viruses are being caught on servers by other scanners.. but > not by ClamAV.. Can anyone explain this to me?? > I have 0.85.1 version running. Enable ScanPE and DetectBrokenExecutables -trog signature.asc Description: This is a digit

Re: [Clamav-users] WORM_Netsky.DAM & WORM_BAGZ.C not being caught

2005-06-02 Thread Niek
On 6/2/2005 11:55 AM +0200, ramya wrote: These two viruses are being caught on servers by other scanners.. but not by ClamAV.. Can anyone explain this to me?? With the information you've supplied here, there is 1 explanation: no definition for these viruses. I have 0.85.1 version running. Reg

[Clamav-users] WORM_Netsky.DAM & WORM_BAGZ.C not being caught

2005-06-02 Thread ramya
These two viruses are being caught on servers by other scanners.. but not by ClamAV.. Can anyone explain this to me?? I have 0.85.1 version running. Regards Ramya ** DISCLAIMER ** Information contained and transmitted by this E-MAIL is proprietary to Sify Limited and is intended