Hmmmmm. Sophos had MyDoom-A pegged at 4:45 PM (PST) Jan. 26. IIRC, Clam caught up about 7:00 PM that evening.
According to the clamav-virusdb list archives, Clam had a signature for MyDoom-A at 26-Jan-2004 20:23 GMT (which is 12:23pm PST). It was called Worm.SCO.A at the time, though, as Clam had a signature for it before it was named by the major AV vendors. They added aliases for the names used by other AV products later on.
Cheers, Dave -- Dave O'Neill <[EMAIL PROTECTED]> Roaring Penguin Software Inc. +1 (613) 231-6599 ext. 104 http://www.roaringpenguin.com/ _______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

