On Sun, 18 Sep 2005 at 12:42:05 -0700, Helga Fcours wrote: > Does the mytob.gh signature match on most morphine/mew packed > binaries? Bagle.BB-gen matches all pex packed binaries that are not > infected (notepad and wordpad included)
Please submit false positives at the usual place: http://www.clamav.net/sendvirus.html > and the pex packer binary > itself as Bagle.BB-gen, so I suspect that this mytob signature might > be doing the same thing. > > Clam, in a similar way, detects the morphine packer itself as > mytob.gh and it is not infected. What is the sig targeting? -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
