Update (daily: 156)

ClamAV database updated (2004.03.03 00:36 GMT): daily.cvd, viruses.db2
Version: 156

Submission: n/a
Sender: n/a
Added: Trojan.URLspoof.gen (reinserted after removing by mistake in daily 146).

Submission: 1620-web
Sender: Stephen Agar
Virus: Worm.Bagle.H-1 (Trend)
Added: No. Worm.Bagle.I found after unzipping password-protected zip.

Submission: 1621-web
Sender: Doncho N. Gunchev
Virus: W32/Mydoom.A@mm (Fprot)
Added: No. Worm.SCO.A found after extracting attachment from non-standard email 
file.

Submission: 79-mail
Sender: Christian Peer
Virus: unknown
Added: No. Worm.Bagle.F-zippwd found.

Submission: 80-mail
Sender: Maciej Uhlig
Virus: unknown
Added: No. Worm.Bagle.F-zippwd found.

Submission: 1622-web
Sender: Sandu
Virus: PWSteal.Tarno.B
Added: No. Sender contacted for files packed with other archiver; responded; 
queued.

Submission: 1624-web
Sender: JP Szikor
Virus: W32/Bagle.h!pwdzip (McAfee)
Added: No. The submitted signature isn't good. It's not general - it contains 
the filename of zipped file, which is variable. It can't be created.

Submission: 1625-web
Sender: Ken Bloom
Virus: Beagle.f
Added: Worm.Bagle.F-zippwd-3
Note: Another variant of emails with password-protected ZIP files.

Submission: 1626-web
Sender: joseph t mai
Virus: unknown
Added: No. A password-protected zip file, no info about the password.

Submission: 1629-web
Sender: Lucas Albers
Virus: Bagle variant
Added: No. A password-protected zip file, no info about the password.

Submission: 1634-web
Sender: Ted Cabeen
Virus: Worm.Bagle.F-zippwd
Added: No. A password-protected zip file. It's not possible to create a 
reliable signature for such zip files.

Submission: 1635-web
Sender: Adam Seniuk
Virus: W32.Beagle.I@mm
Added: No. Worm.Bagle.H found after unzipping the file.

Submission: 82-mail
Sender: psz * maths.usyd.edu.au
Virus: unknown
Added: No. Worm.Bagle.F-zippwd found.

Submission: 1637-web
Sender: Didi Rieder
Virus: unknown
Added: No. A message without attachment.

Submission: 1643-web
Sender: Mike Cathey
Virus: Worm.Bagle.H variant?
Added: No. Worm.Bagle.J found after unzipping.

Submission: 1644-web
Sender: Olivier Miakinen
Virus: unknown
Added: No. A damaged bounce message.

Submission: 1645-web
Sender: Michael Torrie
Virus: unknown
Added: No. Worm.Bagle.J found after unzipping password-protected ZIP file.

Submission: 1646-web
Sender: Ming Hou
Virus: Bagel.j@MM (McAfee)
Added: No. A password-protected ZIP file without info about the password.

Submission: 1647-web
Sender: Philip Black
Virus: unknowm
Added: No. A password-protected ZIP file without info about the password.

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 tomek@xxxxxxxxxxxx   http://www.lodz.tpsa.pl/   | ones and zeros.
 tomek@xxxxxxxxxx   http://www.ClamAV.net/   A GPL virus scanner


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click