Update (daily: 286)

ClamAV database updated (2004.04.27 14:47 GMT): daily.cvd, viruses.db2
Version: 286
Signatures total: 21272

Submission: 2803-web
Sender: Theresa Fruner
Virus: W32.Netsky.P@mm
Added: No. Damaged, very short textual fragment of a mail message.

Submission: 2884-web
Sender: orkcu
Virus: unknown
Added: Worm.Tibbo (it was just added by Christoph Cordes from 2880-web)
Alias: Win32.HLLM.Generic.289 (Drweb)

Submission: 2886-web
Sender: Jason Haar
Virus: RANDEX-D
Added: Worm.Randex.H-unp
Alias: TR/Small.A2 (Hbedv)
Note: Worm.Randex.H (the UPXed original) was just added by Christoph Cordes

Submission: 2787-web, 2888-web
Sender: Jason Haar, Rob MacGregor
Virus: false Worm.Gibe.F
Added: n/a. The detection is intended. The sample is an example of damaged 
Worm.Gibe.F, common and troublesome message.

Submission: 2889-web
Sender: eastcape
Virus: unknown
Added: No. It's just a text message about blocking an infected message.

Submission: 2890-web
Sender: David Rubert
Virus: w32/netsky.p.eml!.exe
Added: No. Worm.SomeFool.P found after editing the distorted message (all lines 
were preceded with ">".

Submission: 2893-web
Sender: Michael Dorrington
Virus: I-Worm/Bugbear.D (AVG)
Added: Worm.Bugbear.E (it was added by Christoph Cordes from 2905-web but 
Michael submitted the sample 3 hours earlier).
Alias: Win32.HLLM.Bugbear.4 (Drweb)

Submission: 2897-web
Sender: Manfred Wierich
Virus: Win32.NetSkyQ
Added: No. Worm.SomeFool.Q found after extracting the attachment from the 
forwarded message.

Submission: 2899-web
Sender: Manfred Wierich
Virus: Win32.NetSkyQ
Added: No. Worm.SomeFool.P found after extracting the attachment from the 
forwarded message.

Submission: 2902-web
Sender: Gabor Funk
Virus: Netsky.AA (Fprot)
Alias: Worm/Netsky.AA (Hbedv), W32/Netsky-AA (Sophos), Win32.HLLM.Netsky.17408 
(Drweb)
Added: Worm.SomeFool.AA

Submission: 2904-web
Sender: Theresa Fruner
Virus: unknown 
Added: No. Worm.SomeFool.Q found after extracting the attachment from the 
forwarded message.

Submission: 2906-web
Sender: Alexei Kuznetsov
Virus: I-Worm.NetSky.q
Added: No. A damaged file (not unpackable).

Submission: 2907-web
Sender: Jeff
Virus: unknown 
Added: No. Very short fragment of a file (22 B).

Submission: 2908-web
Sender: Richard Rager
Virus: unknown 
Added: No. Not a virus. The message contains a bmp bitmap file and empty zip 
file.

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 tomek@xxxxxxxxxxxx                              | ones and zeros.
 tomek@xxxxxxxxxx   http://www.ClamAV.net/   A GPL virus scanner


-------------------------------------------------------
This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
For a limited time only, get FREE Ground shipping on all orders of $35
or more. Hurry up and shop folks, this offer expires April 30th!
http://www.thinkgeek.com/freeshipping/?cpg=12297