I have checked the sample with Trend, Kasperksy and McAfee. They all report "no virus found". ClamAV finds W95/Elkern
When executing the binary I get a dialog telling of missing a DLL. The binary does nothing harmfull to the PC as I see it (it drops no files and dosn't alter the registry). This looks like a false positive. If someone has a copy of the real Elkern virus new signature could be created. This mail covers submission 197. Best regards, Diego d'Ambra -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: 14. august 2003 15:45 To: [EMAIL PROTECTED] Subject: [Clamav-users] signature W95/Elkern Hi, are there anyone who are able to check signature in a windows-exe-file. ClamAV reject mails because finding W95/Elkern, CAI, trend-micro don't find anything. And now? ... TNX! regards Juergen Frost -- r.z.w. cimdata AG Zum Hospitalgraben 2 99425 Weimar Tel: +49 (0) 3643 8640 0 Fax: +49 (0) 3643 8640 99 Web: http://www.rzw.de ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01 /01 _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
