Update (daily: 2367)

ClamAV database updated (21 Dec 2006 16:35 +0000): daily.cvd
Version: 2367

Submission-ID: 498364
Sender: Jotti
Submission notes: Same as in Submission-ID 594219
Added: No

Submission-ID: 503080
Sender: YuLiS
Submission notes: Same as in Submission-ID 642361
Added: No

Submission-ID: 582725
Sender: Virus Total
Submission notes: Same as in Submission-ID 594219
Added: No

Submission-ID: 594219
Sender: Virus Total
Added: Trojan.Clicker.Agent-55
Virus name alias: Trojan-Clicker.Win32.Agent.ij (Kaspersky AVP)

Submission-ID: 599499
Sender: Virus Total
Submission notes: Same as in Submission-ID 642361
Added: No

Submission-ID: 602106
Sender: Jotti
Submission notes: Same as in Submission-ID 605965
Added: No

Submission-ID: 605965
Sender: Fernando Hartmann
Added: Trojan.Downloader.Banload-1914
Virus name alias: Trojan-Downloader.Win32.Banload.brc (Kaspersky AVP), 
GenPack:Trojan.Downloader.Banload.CH (Bitdefender)

Submission-ID: 608127
Sender: Fernando Hartmann
Added: Trojan.Downloader.Banload-1915
Virus name alias: Trojan-Downloader.Win32.Banload.bpt (Kaspersky AVP), 
Trojan.Downloader.Banload.BPT (Bitdefender)

Submission-ID: 608184
Sender: Anonymous
Added: Trojan.Dropper.Agent-158
Virus name alias: Trojan-Dropper.Win32.Agent.bad (Kaspersky AVP)

Submission-ID: 610319
Sender: Lars Hecking
Added: Backdoor.IRC.Zapchast
Virus name alias: Backdoor.IRC.Zapchast (Kaspersky AVP), Trojan.Zapchas.F 
(Bitdefender)

Submission-ID: 610496
Sender: Brazilian CERT
Submission notes: Same as in Submission-ID 608127
Added: No

Submission-ID: 610878
Sender: Virus Total
Submission notes: Same as in Submission-ID 615038
Added: No

Submission-ID: 613445
Sender: Jotti
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 615038
Sender: Dmitry
Added: Trojan.Downloader.Agent-1248
Virus name alias: Trojan.Win32.Agent.zq (Kaspersky AVP), 
DeepScan:Generic.Dld.Wmed.D.E0028963 (Bitdefender)

Submission-ID: 615292
Sender: Virus Total
Submission notes: Same as in Submission-ID 615038
Added: No

Submission-ID: 615399
Sender: Jotti
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 616121
Sender: Virus Total
Submission notes: Same as in Submission-ID 615038
Added: No

Submission-ID: 616346
Sender: Jotti
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 616589
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 616645
Sender: Edy Supriatna
Added: Worm.Ridnu
Virus name alias: Email-Worm.Win32.Ridnu.b (Kaspersky AVP), 
Generic.Malware.SVhidWk!.D9715388 (Bitdefender)

Submission-ID: 616904
Sender: Anonymous
Added: Trojan.Downloader.Agent-1249
Virus name alias: Trojan-Downloader.NSIS.Agent.aa (Kaspersky AVP), 
Trojan.Downloader.NSIS.I (Bitdefender)

Submission-ID: 617360
Sender: Brazilian CERT
Submission notes: Same as in Submission-ID 619460
Added: No

Submission-ID: 617553
Sender: Anonymous
Added: Worm.Bagle-GS
Virus name alias: Win32.Bagle.GU@mm (Bitdefender)

Submission-ID: 619261
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 619460
Sender: Fernando Hartmann
Added: Trojan.Bancos-1685
Virus name alias: Trojan-Spy.Win32.Bancos.zm (Kaspersky AVP)

Submission-ID: 620262
Sender: Jotti
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 620299
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 622064
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 622198
Sender: Virus Total
Submission notes: Same as in Submission-ID 642361
Added: No

Submission-ID: 622317
Sender: Virus Total
Submission notes: Same as in Submission-ID 608184
Added: No

Submission-ID: 622961
Sender: Virus Total
Submission notes: Same as in Submission-ID 608184
Added: No

Submission-ID: 623336
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 623807
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 625194
Sender: Reedcourty
Added: Trojan.Backdoor.Messah
Virus name alias: Backdoor.Win32.Messah.10 (Kaspersky AVP), Backdoor.Messah.1.0 
(Bitdefender)

Submission-ID: 625885
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 626854
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 630447
Sender: Fernando Hartmann
Submission notes: Same as in Submission-ID 520849
Submission notes: Submitted Signature to Sven which matches this sample too
Submission notes: binary similarity is over 50%.. so this is very probably
Submission notes: related to sdbot-family
Added: No

Submission-ID: 633230
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 636776
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 637394
Sender: JAB_au
Submission notes: Already detected as HTML.Phishing.Bank-1007
Added: No

Submission-ID: 639065
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 639086
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 639097
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 639125
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 639163
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 640160
Sender: Jotti
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 640381
Sender: Anonymous
Submission notes: should match my other sig 617553
Added: No

Submission-ID: 641258
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 641523
Sender: albert
Added: Worm.Bagle-GT

Submission-ID: 641743
Sender: Anonymous
Added: Trojan.Plut-A
Virus name alias: Virus.Win32.Plut.a (Kaspersky AVP)

Submission-ID: 641764
Sender: Fernando Hartmann
Added: Trojan.Downloader.Banload-1916
Virus name alias: Trojan-Downloader.Win32.Small.ecv (Kaspersky AVP), 
BehavesLike:Trojan.Downloader (Bitdefender)

Submission-ID: 641912
Sender: Jotti
Submission notes: Same as in Submission-ID 641764
Added: No

Submission-ID: 642213
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 642333
Sender: Virus Total
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 642361
Sender: Anonymous
Added: Trojan.Killav-106
Virus name alias: Trojan.Win32.KillAV.hh (Kaspersky AVP), Trojan.KillAV.DH 
(Bitdefender)

Submission-ID: 642374
Sender: Sergey  Gershovich
Added: Worm.Mydoom.
Virus name alias: Email-Worm.Win32.Mydoom.bg (Kaspersky AVP), 
Win32.Mydoom.BG@mm (Bitdefender)

Submission-ID: 642443
Sender: Greg Lincoln
Submission notes: is normal JFIF File
Submission notes: Nothing happens in my vmware
Added: No

Submission-ID: 642475
Sender: Anonymous
Submission notes: Can't process submission without file
Added: No

Submission-ID: 642634
Sender: Jotti
Submission notes: Same as in Submission-ID 641743
Added: No

Submission-ID: 642768
Sender: Anonymous
Added: Trojan.Spy.Banker-5906
Virus name alias: Trojan-Spy.Win32.Bancos.zf (Kaspersky AVP), 
DeepScan:Generic.Banker.OT.FBD1E06C (Bitdefender)

Submission-ID: 643130
Sender: Jotti
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 643499
Sender: Guilherme
Added: Trojan.Downloader.Delf-711
Virus name alias: BehavesLike:Trojan.Downloader (Bitdefender)

Submission-ID: 643521
Sender: Jotti
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 643959
Sender: Jotti
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 644362
Sender: phishery.internetdefence.net
Submission notes: Already detected as HTML.Phishing.Pay-261
Added: No

Submission-ID: 644503
Sender: phishery.internetdefence.net
Submission notes: Already detected as Email.Phishing.RB-40
Added: No

Submission-ID: 644595
Sender: Jotti
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 644675
Sender: phishery.internetdefence.net
Submission notes: Already detected as Email.Phishing.RB-41
Added: No
Virus name alias: Net-Worm.Win32.Nimda (Kaspersky AVP), JS.Nimda.A (Bitdefender)

Submission-ID: 644680
Sender: phishery.internetdefence.net
Submission notes: Already detected as HTML.Phishing.Bank-1011
Added: No

Submission-ID: 644774
Sender: Fernando Hartmann
Added: Trojan.Downloader.Delf-712
Virus name alias: Trojan-Spy.Win32.Banker.chl (Kaspersky AVP)

Submission-ID: 644834
Sender: Jotti
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 645107
Sender: phishery.internetdefence.net
Submission notes: Already detected as HTML.Phishing.Pay-262
Added: No

Submission-ID: 645684
Sender: Peter Schultze
Added: JS.Feebs.BC
Virus name alias: Worm.Win32.Feebs.jk (Kaspersky AVP), JS.Feebs.Gen 
(Bitdefender)

Submission-ID: 646838
Sender: Jotti
Submission notes: Same as in Submission-ID 616904
Added: No

Submission-ID: 647829
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647831
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647832
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647833
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647834
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647836
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647837
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647840
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647838
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647839
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647842
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647843
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647844
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647845
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647846
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647847
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647848
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647850
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647851
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647852
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647853
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647854
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647855
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647856
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647857
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647859
Sender: phishery.internetdefence.net
Added: pdb/wdb-signature
Added: HTML.Phishing.Bank-1013

Submission-ID: 647860
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647862
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647864
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647863
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647865
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647866
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647867
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647868
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647869
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647870
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647871
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647872
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647873
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647874
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647875
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647876
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647877
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647879
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647880
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647881
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647882
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647883
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647884
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647885
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647886
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647893
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647895
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647897
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647898
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: 647899
Sender: phishery.internetdefence.net
Submission notes: Same as in Submission-ID 647859
Added: No

Submission-ID: n/a
Sender: n/a
Added: HTML.Phishing.Bank-1012
Added: Email.Phishing.RB-42
Added: Email.Phishing.RB-43
Added: Email.Phishing.RB-44
Added: Email.Phishing.RB-45

Trojan- and worm-signatures created by Andreas Faust.

-- 
Best regards,
  Sven

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-virusdb