Dumaru.c and F-prot

[Antony Stone]

On Saturday 27 September 2003 1:03 pm, Antony Stone wrote:

> On Saturday 27 September 2003 12:37 pm, Jan Elmqvist Nielsen wrote:
> > Have users of f-prot observed that f-prot dosn't catch Dumaru.c virus
> > (patch.exe)?
> >
> > SIGN.DEF created 25 September 2003
> > SIGN2.DEF created 25 September 2003
> > MACRO.DEF created 25 September 2003

> Very strange.
>
> I am using exactly the same version of F-Prot as you - Program 4.2.0,
> engine 3.13.4, and yet mine is picking up Dumaru quite happily as
> W32/Dumaru.A at mm (and has been since 4th September - that's the first one I
> received).

These are my current signature files:

MACRO.DEF 480070 bytes Sep 25 19:45
SIGN.DEF 1090336 bytes Sep 26 01:44
SIGN2.DEF 887167 bytes Sep 26 01:44

MD5sums:

3839957bbb3dc0d065c5ae4c15460de5 MACRO.DEF
79ca097f2560b5905e2b9ed678a611b6 SIGN.DEF
a1d067764f6eea2bdf30b8d0e6ff6df8 SIGN2.DEF

Antony.

--

It's beautiful, man, beautiful.   It's enough to make me merely hate BIND
rather than loathe it with every fibre of my being.

 - David Cantrell