From clamav-virusdb-bounces@lists.clamav.net Tue Jun 30 20:28:06 2009 Return-Path: X-Original-To: list@tad.clamav.net Delivered-To: list@tad.clamav.net X-Virus-Scanned: Debian amavisd-new at tad.clamav.net Received: from tad.clamav.net ([127.0.0.1]) by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C55SEkn1cQu4; Tue, 30 Jun 2009 20:28:05 +0200 (CEST) Received: from tad.clamav.net (localhost.localdomain [127.0.0.1]) by tad.clamav.net (Postfix) with ESMTP id 66D2931C67A; Tue, 30 Jun 2009 20:28:03 +0200 (CEST) X-Original-To: clamav-virusdb@tad.clamav.net Delivered-To: clamav-virusdb@tad.clamav.net X-Virus-Scanned: Debian amavisd-new at tad.clamav.net Received: from tad.clamav.net ([127.0.0.1]) by localhost (tad.clamav.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CsRSlUwXR4aj for ; Tue, 30 Jun 2009 20:28:02 +0200 (CEST) Received: from sourcefire.com (gi.sourcefire.com [64.214.53.10]) by tad.clamav.net (Postfix) with ESMTP id 8383231C67A for ; Tue, 30 Jun 2009 20:28:02 +0200 (CEST) Received: from sourcefire.com ([127.0.0.1]) by localhost (mail.it.sourcefire.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 11725-01 for ; Tue, 30 Jun 2009 14:28:01 -0400 (EDT) To: clamav-virusdb@lists.clamav.net From: Edvin Torok X-Loop: mailer-daemon@clamav.net X-Release: 9526 Precedence: bulk Message-Id: <20090630182801.55D233000C@si01.clam.sourcefire.com> Date: Tue, 30 Jun 2009 14:28:01 -0400 (EDT) X-Virus-Scanned: Sourcefire AV 1.3.2 Subject: [clamav-virusdb] Update (daily: 9526) X-BeenThere: clamav-virusdb@lists.clamav.net X-Mailman-Version: 2.1.11 Reply-To: Edvin Torok List-Id: ClamAV VirusDB announcements List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: clamav-virusdb-bounces@lists.clamav.net Errors-To: clamav-virusdb-bounces@lists.clamav.net ClamAV database updated (30 Jun 2009 14-27 -0400): daily.cvd Version: 9526 Submission-ID: 9060174 Sender: Christopher Greer Submission notes: It was detected as a virus because it used an obfuscated Submission notes: script very similar to a trojan, I added a false positive Submission notes: signature now. Submission notes: Your other files are detected as PUA.Script.Packed-3 because Submission notes: they have a packed script, see Submission notes: http://www.clamav.net/support/pua/ for a description of Submission notes: 'Packed'. Submission notes: Submission notes: You can avoid having your files detected by not Submission notes: obfuscating/packing the AutoIt script. Submission notes: file whitelisted in fp database. -- Best regards, Edvin Torok _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-virusdb