Update (daily: 287)

ClamAV database updated (2004.04.27 22:49 GMT): daily.cvd, viruses.db2
Version: 287
Signatures total: 21276

Submission: 2472-web, 2494-web, 2609-web, 2611-web, 2862-web
Sender: Fabrice Bardey, Joe, Keith Murphy, Anthony Graham, Alex Cherney
Virus: false Worm.Bagle.P.2
Added: Worm.Bagle.P.2
Note: The false signature at last removed. A new one created again from 
submission 2308-web.

Submission: 2883-web
Sender: Steven Balthazor
Virus: unknown
Added: No. The message contains 2 JPG images and empty zip file.

Submission: 2885-web, 2901-web
Sender: Mikolaj K., Tomasz Klim
Virus: TrojanDownloader.Win32.VB.bj (Kaspersky)
Alias: Trojan.DownLoader.24576 (Drweb)
Added: Trojan.DownLoader.24576

Submission: 2891-web
Sender: Steven Haywood
Virus: IRC trojan
Alias: Worm/SdBot.MB (Hbedv)
Added: Worm.SdBot.MB

Submission: 2896-web
Sender: Tomasz Klim
Virus: unknown
Alias: TR/Small.EP.2 (Hbedv), Troj/Small-AG (Sophos), Trojan.DownLoader.197 
(Drweb)
Added: Trojan.Small.EP.2

Submission: 2900-web
Sender: Mike Lambert
Virus: W32/Bagle-W (Sophos)
Alias: Worm/Bagle.Z.VBS (Hbedv), VBS.Generic.348 (Drweb)
Added: No. Worm.Bagle.Y-vbs detected after "repairing" the message (lacking 
header).

Submission: 2909-web
Sender: Christian
Virus: Trojan.Startpage.gh (Kaspersky)
Alias: TR/StartPage.GH (Hbedv), Troj/StartPa-GH (Sophos), Trojan.StartPage.56 
(Drweb)
Added: Trojan.StartPage.GH

Submission: 2913-web
Sender: Paul Traina
Virus: w32.netsky.d@mm (Symantec)
Added: No. Worm.SomeFool.Gen-1 found after "repairing" the message (it lacks 
proper headers).

Submission: 2914-web
Sender: Kamil
Virus: false Trojan.Dropper.Small.HG
Added: Trojan.Dropper.Small.HG
Alias: Troj/Webber-H (Sophos), TR/Small.Dld.HG (Hbedv)
Note: The false signature removed. The better one created again from subm. 
2475-web.

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 tomek@xxxxxxxxxxxx                              | ones and zeros.
 tomek@xxxxxxxxxx   http://www.ClamAV.net/   A GPL virus scanner


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click