Update (daily: 112)

ClamAV database updated (2004.01.29 10:05 GMT): daily.cvd, viruses.db2
Version: 112

Submission: 841-web
Sender: mauritz
Virus: MyDoom
Added: No. Damaged zipfile.

Submission: 842-web
Sender: Jason Parsons
Virus: W32.Novarg.A@MM
Added: No. Worm.SCO.A found in the bounce. Try newer version of ClamAV.

Submission: 844-web, 846-web, 856-web
Sender: Kevin Shanahan, AJ, Oliver Blaha
Virus: unknown
Alias: W32/Mimail-S (Sophos), Win32.HLLM.Foo (Drweb), W32.Mimail.R@mm (Symantec)
Added: Worm.Mimail.R

Submission: 845-web
Sender: Patrick Schmidt
Virus: W32/MyDoom@MM
Added: No. Worm.SCO.A found.
Note: Oh, no! 37 unneeded samples, wasting our time and 870 KB! :-((

Submission: 847-web
Sender: Wolfgang Schinagl
Virus: unknown
Added: No. List of email addresses with binary junk.

Submission: 847-web (sic!)
Sender: Torsten Schroder
Virus: false positive of Joke.CokeGift
Added: n/a. Not removed. Not false. The sample is really infected. We already 
told it 2 days ago.

Submission: 849-web, 851-web, 852-web, 853-web, 855-web
Sender: Damien laureaux, marco maria leoni, nico baggus
Virus: w32.Mimail@mm etc.
Added: No. Worm.SCO.A found.
Note: All: stop sending Worm.SCO.A samples!!!!!!!!
Note: Due to similar submissions, adding new signatures is late!

Submission: 854-web
Sender: Jo Mills
Virus: false positive of Necronic.4943
Added: n/a. 
Note: the false sig was removed in "daily 104" on 2004.01.26. Please refresh 
your database.

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 tomek@xxxxxxxxxxxx   http://www.lodz.tpsa.pl/   | ones and zeros.
 tomek@xxxxxxxxxx   http://www.ClamAV.net/   A GPL virus scanner


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn