Svar: Re: bagle-i worm

[shrek-m at gmx.de]

Jason Balicki wrote:

>>I've just installed Clam also, any one know how to check if that's got it
>>
>>
>covered yet?
>
>grep -i bagle /path/to/share/clamav/viruses.* | cut -f 1 -d " "
>
>viruses.db:Worm.Bagle.A
>viruses.db2:Worm.Bagle.A2
>viruses.db2:Worm.Bagle.A2-unp
>viruses.db2:Worm.Bagle.A3
>viruses.db2:Worm.Bagle.A3-unp
>viruses.db2:Worm.Bagle.E
>viruses.db2:Worm.Bagle.F
>viruses.db2:Worm.Bagle.F-zippwd
>viruses.db2:Worm.Bagle.H
>viruses.db2:Worm.Bagle.F-zippwd-2
>viruses.db2:Worm.Bagle.I
>viruses.db2:Worm.Bagle.A2-dll
>


# file /usr/local/share/clamav/*
/usr/local/share/clamav/daily.cvd: data
/usr/local/share/clamav/main.cvd:  data



# sigtool --version; sigtool --list | grep -i bagle
sigtool / ClamAV version 0.67
Worm.Bagle.A
Worm.Bagle.A2
Worm.Bagle.A2-unp
Worm.Bagle.A3
Worm.Bagle.A3-unp
Worm.Bagle.E
Worm.Bagle.F
Worm.Bagle.F-zippwd
Worm.Bagle.H
Worm.Bagle.F-zippwd-2
Worm.Bagle.I
Worm.Bagle.A2-dll

--
shrek-m