Update (daily: 1131)

ClamAV database updated (2005.10.12 20:39 GMT): daily.cvd
Version: 1131
Signatures total: 40549

Submission: 120804-vt, 120908-web, 121001-web, 121096-vt, 121202-web, 
121617-jotti, 121640-web, 121734-jotti
Sender: Virus Total, Naiker, timeout, Virus Total, Thomas Althoff, Jotti, 
Thomas Althoff, Jotti
Note: Additional Zafi.E sig for stable version to detect FSG packed files. 
Matches both Worm.Zafi.E-1 and Worm.Zafi.E-2 samples.
Added: Worm.Zafi.E-FSG
Alias: Email-Worm.Win32.Zafi.g (Kaspersky), Win32.HLLM.Hazafi.49152 (Drweb), 
Win32.Zafi.F@mm (Bitdefender)

Submission: 121004-web, 121005, 121641, 121731-web, 122550-web
Sender: Nicolas, anonymous, anonymous, anonymous, ghislain
Note: Broken zipfile. After manual extracting, Worm.Mytob.CL found.
Added: No.

Submission: 121211-jotti
Sender: Jotti
Note: Worm.Sircam found by a devel version.
Added: No.

Submission: 121324-jotti
Sender: Jotti
Note: Worm.Drefir.E detected.
Added: No.

Submission: 121623-jotti, 121630-jotti, 121632-jotti
Sender: Jotti, Jotti, Jotti
Note: Eicar-Test-Signature found by a devel version.
Added: No.

Submission: 121720-jotti
Sender: Jotti
Note: Worm.P2P.Tibick.D found.
Added: No.

Submission: 121885
Sender: anonymous
Note: Email with empty attachment. Harmless.
Added: No.

Submission: 122180
Sender: anonymous
Note: Broken zipfile. Even after manual extracting, Broken.Executable found. 
Harmless.
Added: No.

Submission: 122262-web
Sender: roberto
Note: Banco Poste (Italian) phishing.
Added: HTML.Phishing.Bank-281

Submission: 122271-web, 122286-web, 122547-malwareupload, 122649-web
Sender: Hanno Bock, Stefan Helbing, MalwareUpload.com, Oliver Stoeneberg
Note: Deutsche Postbank phishing.
Added: HTML.Phishing.PB-3

Submission: 122277-web
Sender: David
Note: Trojan.IRCBot-93 found by a devel version in the file linked from the 
message. BTW, if you want to inspect extarnal files called from emails, use 
MailFollowURLs in clamd.conf.
Added: No.

Submission: 122494-web
Sender: Chris Lewis
Note: Cut-out zipfile, resulting in Broken.Executable. Harmless.
Added: No.

Submission: 122549-web, 122624-web
Sender: Stefan Helbing, Willi Mann
Note: Deutsche Postbank phishing.
Added: Email.Phishing.PB-4

-- 
 Tomasz Papszun    SysAdm @ TP S.A. Lodz, Poland    | And it's only
 tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros.
 tomek at clamav.net   http://www.ClamAV.net/   A GPL virus scanner
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-virusdb