Update (daily: 612)

ClamAV database updated (2004.11.30 20:30 GMT): daily.cvd
Version: 612
Signatures total: 27914

Submission: 6772-web
Sender: George Chelidze
Virus: Trojan-Downloader.Win32.Small.aaj (Kaspersky)
Added: Trojan.Downloader.Small-169 (by Christoph from 6832-web).

Submission: 6935-web
Sender: carl
Virus: unknown
Added: No. This is clamd.log, not malware.

Submission: 6950-web
Sender: Craig Davis
Virus: unknown
Added: No. A message with attachment removed. Harmless.

Submission: 6953-web
Sender: Stefan Schoeman
Virus: W32.Sober.I@mm
Added: No. Very little fragment of binary data. Harmless.

Submission: 6954-web
Sender: David Gibbs
Virus: unknown
Added: Trojan.Small-20 added by Diego from 6955-web but David was the first.

Submission: 6967-web
Sender: Bernhard
Virus: w32/Sober-I
Added: No. Just a message. ClamAV already detects Worm.Sober.I

Submission: 6979-web
Sender: dirk
Virus: unknown
Added: No. Just a plain text message. Harmless.

Submission: 6982-web
Sender: Rene Nieuwenhuizen
Virus: unknown
Added: No. An email with attachment removed. Harmless.

Submission: 7008-web
Sender: hellman
Virus: unknown
Added: No. An email with attachment removed. Harmless.

Submission: 7012-web
Sender: Thomas Arendsen Hein
Virus: unknown
Added: No. Just a list of email addresses. Harmless.

Submission: 7014-web
Sender: Erik Hensema
Virus: unknown
Added: No. Broken data (zip file?). Harmless.

Submission: 7016-web
Sender: Andrew Hopper
Virus: false (what?)
Added: n/a. ClamAV doesn't detect anything in it, so not a false positive.

Submission: 7021-web
Sender: Christian
Virus: false positive (of what?)
Added: n/a. ClamAV doesn't detect anything in it, so not a false positive.

Submission: 7059-web, 7060-web, 7157-web
Sender: George Chelidze
Virus: unknown
Alias: EMail-Worm.Win32.Sober.i (Kaspersky)
Added: Worm.Sober.I-2

Submission: 7103-web
Sender: Tor Willy Austerslatt
Virus: NetSky.AA
Added: No. Worm.SomeFool.AA-2 detected after extracting an attachment from the 
broken email message.

Submission: 7122-web
Sender: Janne Hyvarinen
Virus: false Worm.Mydoom.AD
Added: Worm.Mydoom.AD signature updated.

Submission: 7139-web
Sender: Marcel v. Birgelen
Virus: Sober.I (variant?)
Added: No. Broken data - not an original file, but from Symantec quarantine, so 
we can't prepare a signature from it.

Submission: 7154-web
Sender: Gerard van Dijnsen
Virus: false Worm.Gaobot.167
Added: n/a. The Worm.Gaobot.167 signature removed.

Submission: 7160-web, 7163-web
Sender: Tinus Nijmeijers, Anna
Virus: Email-Worm.Win32.Wurmark.a (Kaspersky)
Alias: Worm/Wurmark.a.1 (Hbedv), Win32.HLLM.Admir (Drweb), W32/Wurmark.A 
(F-Prot)
Added: Worm.Wurmark.A

-- 
 Tomasz Papszun   SysAdm @ TP S.A. Lodz, Poland  | And it's only
 tomek@xxxxxxxxxxxx http://www.lodz.tpsa.pl/iso/ | ones and zeros.
 tomek@xxxxxxxxxx   http://www.ClamAV.net/   A GPL virus scanner
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-virusdb