Update (daily: 144)

ClamAV database updated (2004.02.28 07:03 GMT): daily.cvd, viruses.db2
Version: 144

Submission: n/a
Sender: Tomasz Papszun (THR)
Virus: Worm.Bizex
Alias: Worm/Bizex.nr (Hbedv), Worm.Bizex (Drweb), W32/Bizex-A (Sophos)
Added: Worm.Bizex.A.1
Added: Worm.Bizex.A.2
Added: Worm.Bizex.A.3
Added: Worm.Bizex.A.4
Added: Worm.Bizex.A.5
Added: Worm.Bizex.A.6
Added: Worm.Bizex.A.7
Added: Worm.Bizex.A.8

Submission: 1417-web
Sender: Dirk Mueller
Virus: W32/Mimail-M (Sophos)
Alias: Worm/Mimail.M1 (Hbedv), W32/Mimail-M (Sophos), Win32.HLLM.Foo (Drweb)
Added: Worm.Mimail.M.Encr
Added: Worm.Mimail.M
Note: The worm spreads as a password protected zip file - hence .Encr.

Submission: 1467-web
Sender: Dirk Mueller
Virus: Worm.Mimail.M
Alias: Worm/Mimail.M2 (Hbedv), W32/Mimail-M (Sophos), Win32.HLLM.Foo (Drweb)
Added: Worm.Mimail.M-unp
Note: This is not original file - it was deUPXed. Signature from the sender; 
modified.

Submission: 69-mail
Sender: Jan Porath
Virus: unknown
Added: No. Worm.SomeFool found.

Submission: 1446-web
Sender: toster
Virus: I-Worm.Mydoom.a
Added: No. Worm.SCO.A found after extracting the attachment from not MIME 
message.

Submission: 1449-web
Sender: Christian Kuehn
Virus: w32/sober!data (McAfee)
Added: No. Not a virus. Binary junk with email addresses.

Submission: 1462-web
Sender: John
Virus: false Trojan.Dropper.Boot.NCBoot
Added: n/a. ClamAV does NOT detect anything in the file, so not false. Sender 
contacted.

Submission: 71-mail
Sender: Christian Messthaler
Virus: unknown
Added: No. Worm.SomeFool found.

Submission: n/a
Sender: n/a
Virus: deUPXed Worm.Bagle.A2
Added: Worm.Bagle.A2-unp

Submission: 1481-web, 1482-web
Sender: Steve Milton
Virus: unknown
Added: No. Worm.Bagle.A2 found.

Submission: 1483-web
Sender: Urgo
Virus: unknown
Added: Worm.Bagle.A3
Added: Worm.Bagle.A3-unp
Note: Another variant of Worm.Bagle.A

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 tomek@xxxxxxxxxxxx   http://www.lodz.tpsa.pl/   | ones and zeros.
 tomek@xxxxxxxxxx   http://www.ClamAV.net/   A GPL virus scanner


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click