Hi-- On Feb 21, 2013, at 10:28 AM, Zvi Kave wrote: > Is there a signature for ZEUS virus in ClamAV ?
Yes, there are several ZEUS signatures: % sigtool -fZeus [daily.mdb] 2560:34a6f6e6bb8d80fa52b9521dcfc1577d:Win.Trojan.Zeus-1 [daily.mdb] 51388:a3571f6881a9a8b84593c79796131e5a:Win.Trojan.Zeus-2 [daily.ndb] Win.Trojan.Zeus:1:*:77000000696e66322e646174000000004655434b00000000 [main.db] Zeus (Clam)=c08ed0bc007c8ed8b96900be547cb81990e87a00f21f4179686d1f816d2280ec598769288ae057d22b9153813793 [main.db] Zeus-1 (Clam)=8ed0bc007c8ed8b96900be547cb85090e87a00bb540836212656f61459f99320fc105fc3ab1e9d62da1ad66ec8 [main.mdb] 2048:88e9fa738b206e687f16ab76bfcbf149:Trojan.Spy.Zeus [main.mdb] 35840:e9767c30a483450fb1c2c777d4826be7:Trojan.Spy.Zeus-1 [main.mdb] 34816:04666acca8a323708585456c01cc15f8:Trojan.Spy.Zeus-2 [main.mdb] 37376:de73df1274f195e9ce2a4192e37d17ba:Trojan.Spy.Zeus-3 [main.mdb] 5120:9271dcaa30e5f951b3519fcc4a4fe775:Trojan.Spy.Zeus-4 [main.mdb] 34816:64a83405aed1a687db904b0da6dc182b:Trojan.Spy.Zeus-5 Regards, -- -Chuck _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml