Update (daily: 138)

ClamAV database updated (2004.02.24 18:56 GMT): daily.cvd, viruses.db2
Version: 138

Submission: 1227-web, 1228-web, 1229-web, 1230-web, 1231-web, 64-mail, 1232-web
Sender: Axel Dunkel, Jakub Wasielewski, JP DONNIO, Gabriel Mizrahi, Sadik 
Galimuna, nuts
Virus: Win32.Bagle.B@mm (Bitdefender)
Alias: W32/Tanx-A (Sophos), Bagle.B (Kaspersky)
Added: No, already added as Worm.YoursID in daily 133.

Submission: 1237-web
Sender: Yurij R Klimenko
Virus: W97M.Ethan
Added: Not yet. Queued.

Submission: 1239-web, 1240-web, 1241-web, 1242-web, 1243-web
Sender: Gunter Mintzel, JP Szikora, Borko, Martin Hermanowski, Frantisek chovan
Virus: I-Worm.Moodown.b (Kaspersky), W32/Netsky.b@MM (McAfee), Win32/Netsky.B 
(NOD)
Alias: W32/Netsky-B (Sophos), Win32.HLLM.Foo.41984 (Drweb), Worm/NetSky.B.1 
(Hbedv)
Added: No, already added as Worm.SomeFool in daily 134.

Submission: 66-mail
Sender: Felix Buenemann
Virus: Worm.SomeFool
Added: n/a.
Note: Thank you for additional information.

Submission: 1244-web
Sender: Vladimir Costa
Virus: W32/Bugbear.b!data
Added: No. A _very_ damaged file. Not even in executable format.

Submission: 1245-web
Sender: Enrico Caruso
Virus: W32/Netsky.b@MM
Added: No, Worm.SomeFool found after extracting attachment from illegal format 
mail message.

Submission: 1246-web
Sender: Andy Fiddaman
Virus: Dumaru.Y
Added: No, Worm.Dumaru.Y found after extracting attachment from illegal format 
(lacking headers) mail message.

Submission: 1260-web
Sender: Jakub Kulesza
Virus: Worm.SomeFool
Added: No, Worm.SomeFool found in the attachment.

Submission: 1261-web
Sender: marco moscardini
Virus: unknown
Added: No, a mail message with empty attachment.

Submission: 1280-web
Sender: Graham Maltby
Virus: false positive of Trojan.Loony
Added: n/a. The false signature removed.

Submission: 1281-web
Sender: Anders Kvist
Virus: W32/Netsky.b@MM
Added: No, it's just empty zip file.

Submission: 1282-web
Sender: Fabrizio Sisti
Virus: Win32/Netsky.B@mm
Added: No. A message with empty attachment.

Submission: 1284-web
Sender: or
Virus: false positive
Added: n/a. Not positive at all, then no "false positive".

Submission: 1285-web, 1322-web
Sender: Max Kosmach, Rene Nieuwenhuizen
Virus: false positive of Constructor.THKit3
Added: Constructor.THKit3
Note: Old signature will be removed while main.cvd update.

Submission: 67-mail
Sender: F.D. Pronk
Virus: W32.Netsky.b@mm
Added: No. A message with empty attachment.

Submission: 1287-web
Sender: Tony Da Silva
Virus: unknown
Added: No. A message with empty attachment.

Submission: 1289-web
Sender: Pete Ness
Virus: false - not known what
Added: n/a. Sender contacted.

Submission: 1324-web
Sender: Nicolas
Virus: JS.Fortnight.B
Added: No. Empty file (0 B). Sender contacted.

Submission: 1339-web
Sender: Brat
Virus: unknown
Added: No. Worm.MyDoom.E.UPX found.

Submission: 1342-web
Sender: Mick Pollard
Virus: unknown
Alias: W32/Cailont-A (Sophos), Win32.HLLM.LoveLorn (Drweb), Worm/Lovelorn.2 
(Hbedv)
Added: Worm.Lovelorn.2

Submission: 1343-web
Sender: dabfus
Virus: WORM_AGOBOT.DE (Trend)
Alias: W32/Agobot-AJ (Sophos)
Added: Worm.Gaobot.AJ.3

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 tomek@xxxxxxxxxxxx   http://www.lodz.tpsa.pl/   | ones and zeros.
 tomek@xxxxxxxxxx   http://www.ClamAV.net/   A GPL virus scanner


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click