On Wed, Apr 09, 2008 at 03:53:16PM +0200, aCaB wrote: > Henrik K wrote: > >> But I have another one, also without PUA ;-) > >> http://www.beta.wetter.com/lib/js/1d7c7a52.js --> > >> Trojan.Downloader.JS.Agent-2 > >> This is also a "ajax - jquery - lib" from a popular, german - website. > > > > I can confirm too that Trojan.Downloader.JS.Agent-2 (and 1) hit a load of > > legimate sites. Haven't bothered to report since noone has complained that > > surfing is affected. > > Guys, > You should update your virus db more often. > This has been fixed 2 days ago.
What makes you think we don't? 08/04/2008 12:08:33 ClamAV: Reloaded 243723 signatures (engine 0.92.1) 08/04/2008 13:08:37 ClamAV: Reloaded 243747 signatures (engine 0.92.1) 08/04/2008 13:38:41 ClamAV: Reloaded 243768 signatures (engine 0.92.1) 08/04/2008 14:08:44 ClamAV: Reloaded 243768 signatures (engine 0.92.1) 08/04/2008 14:38:47 ClamAV: Reloaded 243816 signatures (engine 0.92.1) 08/04/2008 15:38:51 ClamAV: Reloaded 243828 signatures (engine 0.92.1) 08/04/2008 18:08:58 ClamAV: Reloaded 243839 signatures (engine 0.92.1) 08/04/2008 21:39:07 ClamAV: Reloaded 243846 signatures (engine 0.92.1) 09/04/2008 02:39:19 ClamAV: Reloaded 243849 signatures (engine 0.92.1) 09/04/2008 07:09:30 ClamAV: Reloaded 243869 signatures (engine 0.92.1) 09/04/2008 08:09:34 ClamAV: Reloaded 244861 signatures (engine 0.92.1) 09/04/2008 09:39:40 ClamAV: Reloaded 245630 signatures (engine 0.92.1) 09/04/2008 11:09:45 ClamAV: Reloaded 245634 signatures (engine 0.92.1) 09/04/2008 12:09:50 ClamAV: Reloaded 245640 signatures (engine 0.92.1) 09/04/2008 13:09:55 ClamAV: Reloaded 245708 signatures (engine 0.92.1) 09/04/2008 13:39:59 ClamAV: Reloaded 245735 signatures (engine 0.92.1) 09/04/2008 15:10:05 ClamAV: Reloaded 245755 signatures (engine 0.92.1) 09/04/2008 15:40:08 ClamAV: Reloaded 245768 signatures (engine 0.92.1) 09/04/2008 16:40:13 ClamAV: Reloaded 245783 signatures (engine 0.92.1) 08/04/2008 12:28:45 http://www.cec.jyu.fi/portal_javascripts/Jytkk/ploneScripts1448.js 740+93022 VIRUS ClamAV: Trojan.Downloader.JS.Agent-2 08/04/2008 13:50:20 http://www.macnews.de/ajax.php? 372+26270 VIRUS ClamAV: Trojan.Downloader.JS.Agent-2 08/04/2008 14:55:01 http://acadia.ur.gcion.com/Scripts/GCION.js 324+30161 VIRUS ClamAV: Trojan.Downloader.JS.Agent-2 09/04/2008 08:35:39 http://www.abstractfonts.com/js.php? 532+26262 VIRUS ClamAV: Trojan.Downloader.JS.Agent-2 09/04/2008 09:43:22 http://mapstats.blogflux.com/button.js.php? 228+3578 VIRUS ClamAV: Trojan.Downloader.JS.Agent-2 09/04/2008 11:50:24 http://www.predictad.com/scripts/molosky/combined.js 356+102630 VIRUS ClamAV: Trojan.Downloader.JS.Agent-2 09/04/2008 12:34:52 http://search.dell.com/scripts/chili-1.7.pack.js 372+7321 VIRUS ClamAV: Trojan.Downloader.JS.Agent-2 09/04/2008 14:31:24 http://www.cdcovers.cc/server/server.php? 260+88862 VIRUS ClamAV: Trojan.Downloader.JS.Agent-2 09/04/2008 14:33:55 http://www.oulujarvileader.com/2007/mambots/system/jceutils/jscripts/utils.js 324+8121 VIRUS ClamAV: Trojan.Downloader.JS.Agent-2 09/04/2008 15:16:14 http://www.panoramio.com/photo/240 484+19258 VIRUS ClamAV: Trojan.Downloader.JS.Agent-2 09/04/2008 15:50:33 http://www.csc.fi/portal_javascripts/Plone%20Default/ploneScripts5448.js 452+93027 VIRUS ClamAV: Trojan.Downloader.JS.Agent-2 And no, I'm not going to upload every one of those. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
