Update (daily: 164)

ClamAV database updated (2004.03.03 00:34 GMT): daily.cvd, viruses.db2
Version: 164

Submission: 1484
Sender: tyoma
Virus: Unknown Virus
Alias: I-Worm.Moodown.b (kaspersky)
Notes: Now detected by diego Gen sigs
Added: No 

Submission: 1532
Sender: tyoma
Virus: Unknown Virus
Virus name: Worm.SomeFool
Added: signature updated by Diego

Submission: 1656
Sender: Mike
Virus: Bagle
Virus name: Worm.Bagle.F-zippwd-5
Notes: Worm.Bagle.H FOUND 
Notes: Sig done by diego.
Added: Yes 

Submission: 1657
Sender: Hal-Com
Virus: Nachi-B
Virus name: Worm.W32.Welchia.B
Alias: Worm.Win32.Welchia.b (kaspersky), Win32.HLLW.LoveSan.4 (DrWeb)
Alias: Worm/Nachi.B.1 (Hbedv), W32/Nachi-B (Sophos)
Added: Yes 

Submission: 1659
Sender: Dave Funk
Virus: Unknown Virus (looks like Bagel.F variant)
Notes: ybbaxda.exe: Worm.Bagle.J FOUND 
Notes: Header Sig done by Diego.
Added: Worm.Bagle.F-zippwd-4

Submission: 1660
Sender: Joey Esquibal
Virus: Worm.Bagle.F
Notes: please send full raw message, not only the zip...
Added: No 

Submission: 1661
Sender: Shawn
Virus: Bagel.H
Notes: Worm.Bagle.H FOUND 
Notes: Please send full raw email.
Added: No 

Submission: 1662
Sender: David Meier
Virus: Unknown Virus
Notes: passworded zip. please send full raw email msg.
Added: No 

Submission: 1663
Sender: Manuel
Virus: Unknown Virus
Notes: Yeeeee ! passworded zip. Please send full raw emal.
Added: No 

Submission: 1664
Sender: Cyril Bouvier
Virus: WORM_BAGLE.J
Notes: Worm.Bagle.J FOUND. 
Notes: However, --mbox does not detect it. Sample sent to Nigel.
Added: No 

Submission: 1666
Sender: Noam Ratahus
Virus: Unknown Virus
Alias: I-Worm.NetSky.d (kaspersky)
Notes: Corrupted exe file, not executable.
Added: No 

Submission: 1725
Sender: Kevin Spicer
Virus: false Worm.Mydoom.Gen-1
Added: signature temporary removed

Submission: 1685
Sender: Damien GOUJU
Virus: Worm.Bagle.F-zippwd-3
Added: No, already detected (Worm.Bagle.F-zippwd-3) 

Submission: 1686
Sender: Rafal Lesniak
Virus: Unknown Virus
Notes: message_details.pif: Worm.SomeFool.Gen-1 FOUND
Added: No 

Submission: 1697
Sender: Doug Johnson
Virus: Bagle?
Notes: Passworded zip file.
Added: No 

Submission: 1698
Sender: Matt Goli
Virus: W32.Beagle.K@mm
Notes: Passworded zip. No password given.
Added: No 

Submission: 1702
Sender: Matt
Virus: Unknown Virus
Notes: oemdertr.exe: Worm.Bagle.J FOUND
Added: No 

Submission: 1717
Sender: Sandu
Virus: Trojan.Win32.TalkStocks
Alias: Trojan.Win32.TalkStocks (kaspersky)
Added: Trojan.W32.TalkStocks-dll

Submission: 1718
Sender: Sandu
Virus: TrojanDownloader.Win32.Small.cg
Alias: TrojanDownloader.Win32.Small.cg (kaspersky)
Added: Trojan.Downloader.W32.Small.CG

Submission: 1723
Sender: Ron Rynbrandt
Virus: TrojanDropper.Win32.Dater
Alias: TrojanDropper.Win32.Dater (kaspersky)
Notes: Thanks anyway for the try :)
Added: Trojan.Dropper.W32.Dater

Submission: 1729
Sender: jeremiah
Virus: Unknown Virus
Notes: Not a virus, some spam with an attached GIF: GIF87aä
Added: No 

Submission: 1730
Sender: Jeremiah
Virus: Unknown Virus
Notes: seems your AV deleted it: 
Notes: The file attached to this email was removed because 
Notes: it is infected with the W32.Beagle.J@mm virus. 
Notes: However, we already detect Bagle.J. Thanks
Added: No 

Submission: 1684
Sender: Alain Bertrand
Virus: Unknown Virus
Notes: mpkqrkhq.exe: Worm.Bagle.Gen-1 FOUND
Added: No 

Submission: 1687
Sender: Aaron Joyner
Virus: Unknown Virus
Notes: ojbebgw.exe: Worm.Bagle.Gen-1 FOUND
Added: No 

Submission: 1689
Sender: Rick Macdougall
Virus: Work.Bagle.J
Notes: zip _IS_ password protected : 
Notes: unzip Message.zip 
Notes: Archive: Message.zip 
Notes: [Message.zip] bhsepdiw.exe password:
Added: No 

Submission: 1690
Sender: Darius
Virus: W32.Beagle.H
Notes: imsgei.scr: Worm.Bagle.Gen-2 FOUND
Added: No 

Submission: 1692
Sender: Michael Forbes
Virus: Bagle
Notes: odyefqu.exe: Worm.Bagle.Gen-1 FOUND
Added: No 

Submission: 1694
Sender: Wizard
Virus: Unknown Virus
Notes: xuakfrg.exe: Worm.Bagle.Gen-1 FOUND
Added: No 

Submission: 1696
Sender: Mats Luspa
Virus: Unknown Virus
Notes: Worm.Bagle.J FOUND 
Notes: No mail header given
Added: No 

Submission: 84
Sender: Submitted via email
Virus: unknown
Notes: Worm.Bagle.F-zippwd-3 FOUND 
Notes: Worm.Bagle.Gen-1 FOUND
Added: No 

Submission: 85
Sender: Submitted via email
Virus: unknown
Notes: Worm.Bagle.Gen-2 FOUND
Added: No 

Submission: 1726
Sender: mcl
Virus: Possible Beagle/Bagle variant
Notes: Worm.Bagle.Gen-1 FOUND. 
Notes: Please do not sent passworded zip with no password. Thanks.
Added: No 

Submission: 1731
Sender: Piotr Czerwinski
Virus: W32.Beagle.H@mm (NAV)
Notes: pksxnkb.scr: Worm.Bagle.Gen-2 FOUND
Added: No 

Submission: 1732
Sender: Hussain Virani
Virus: Bagel (I think)
Notes: vuhelevcn.exe: Worm.Bagle.Gen-1 FOUND
Added: No 

Submission: 1733
Sender: fred horman
Virus: Unknown Virus
Notes: hjwrnuj.exe: Worm.Bagle.Gen-1 
Added: No 


Best regards,
Denis De Messemacker

-- 
Denis De Messemacker
GnuPG Key-ID: 0x02787880
ddm@xxxxxxxxxx   http://www.e-labs.org
ddm@xxxxxxxxxx   http://www.ClamAV.net - A GPL virus scanner

pgpZWU67SLyQ7.pgp
Description: PGP signature