On 2009-07-20 20:00, Peter M. Abraham wrote: > Greetings: > > At present, Clam Anti-virus 0.95.2 when using ClamScan with --infected does > not find html and related files that have been infected with Grumblar. > > When will such detection be available in Clam Anti-virus and Clamscan? > > If it is present now, what changes must I make to allow for Clam Anti-virus > to find such infections? > > I do have "DetectPUA yes" in clamd.conf
Hi, I just published some signatures for Gumblar, more will come later: ClamAV database updated (20 Jul 2009 17-23 -0400): daily.cvd Version: 9592 Submission-ID: 8833111 Sender: Virus Total Added: Trojan.JS.Gumblar-8 Virus name alias: Trojan.Script.129045 (Bitdefender) Submission-ID: 8869676 Sender: esbjorn krantzen Added: Trojan.JS.Gumblar Added: PUA.Script.Packed-4 Submission-ID: 8886181 Sender: yoshiaki ito_20090616 Added: Trojan.JS.Gumblar-1 Added: PUA.Script.Packed-5 Added: Exploit.PDF-73 Submission-ID: 8904202 Sender: Virus Total Added: Trojan.JS.Gumblar-2 Virus name alias: Trojan.Script.139377 (Bitdefender) Submission-ID: 9276623 Sender: Virus Total Added: Trojan.JS.Gumblar-5 Virus name alias: Trojan.Script.173034 (Bitdefender) Submission-ID: 9419622 Sender: Virus Total Added: Trojan.JS.Gumblar-7 Submission-ID: 9435021 Sender: Virus Total Added: Trojan.JS.Gumblar-6 Submission-ID: 9447670 Sender: Virus Total Added: Trojan.JS.Gumblar-4 Submission-ID: 9452548 Sender: Virus Total Added: Trojan.JS.Gumblar-3 Best regards, --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
