I have two files here which Clam identified as Worm.Doomjuice.B but which appear to be completely different virii (certainly their file sizes are completely different).
McAfee identifies them as W32/Pate.b and W32/Valla.a (Interestingly, F-Prot agrees with Clam) I tried to submit these samples using the web interface, but they were rejected as already detected by ClamAV (not unreasonably!) Is it possible that these are Doomjuice variants or that the ClamAV (and F-Prot) signatures are too short ? Either way, if the virus database maintainers would like a copy of these files, please let me know how I can send them to you. Thanks, Andy ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
