On Wed, Apr 09, 2008 at 04:49:17PM +0200, aCaB wrote: > Henrik K wrote: > > On Wed, Apr 09, 2008 at 03:53:16PM +0200, aCaB wrote: > >> Henrik K wrote: > >>>> But I have another one, also without PUA ;-) > >>>> http://www.beta.wetter.com/lib/js/1d7c7a52.js --> > >>>> Trojan.Downloader.JS.Agent-2 > >>>> This is also a "ajax - jquery - lib" from a popular, german - website. > >>> I can confirm too that Trojan.Downloader.JS.Agent-2 (and 1) hit a load of > >>> legimate sites. Haven't bothered to report since noone has complained that > >>> surfing is affected. > >> Guys, > >> You should update your virus db more often. > >> This has been fixed 2 days ago. > > > > What makes you think we don't? > > Mostly the fact that there's currently no signature for > Trojan.Downloader.JS.Agent-2.
It was removed 2 days ago? Ah well, bug hunting on the reload code then.. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html