Arnaud Huret <[EMAIL PROTECTED]> wrote: > Here you are. > > Many thanks, > Arnaud
Thanks for the samples Arnaud, they are both viable and run on my test kit - and they are both detected using ClamAV devel-20050413/840/Tue Apr 19 02:42:09 2005. mail.document.Datex-packed.exe: Worm.Sober.N FOUND WORM_NETSKY.Y_www.yahoo.fr.stlouissec.session-000002D3.com: Worm.SomeFool.Y FOUND ----------- SCAN SUMMARY ----------- Known viruses: 33129 Engine version: devel-20050413 Scanned directories: 0 Scanned files: 2 Infected files: 2 Data scanned: 0.08 MB Time: 0.621 sec (0 m 0 s) The Sober signature is new (this variant was discovered yesterday), but the SomeFool/Netsky signature has been in for a while. Which version of Clam are you using?. Regards, Simon _______________________________________________ http://lurker.clamav.net/list/clamav-users.html