$ sigtool -fZbot | wc -l 38480
If that adds anything. On Feb 21, 2013, at 1:49 PM, Zvi Kave <zvi.k...@razlee.com> wrote: > Thank you Chuck (and Alain as well) for the list. > > Zvi > > ----- Original Message ----- From: "Chuck Swiger" <cswi...@mac.com> > To: "ClamAV users ML" <clamav-users@lists.clamav.net> > Sent: Thursday, February 21, 2013 8:33 PM > Subject: Re: [clamav-users] ZEUS virus > > >> Hi-- >> >> On Feb 21, 2013, at 10:28 AM, Zvi Kave wrote: >>> Is there a signature for ZEUS virus in ClamAV ? >> >> Yes, there are several ZEUS signatures: >> >> % sigtool -fZeus >> [daily.mdb] 2560:34a6f6e6bb8d80fa52b9521dcfc1577d:Win.Trojan.Zeus-1 >> [daily.mdb] 51388:a3571f6881a9a8b84593c79796131e5a:Win.Trojan.Zeus-2 >> [daily.ndb] >> Win.Trojan.Zeus:1:*:77000000696e66322e646174000000004655434b00000000 >> [main.db] Zeus >> (Clam)=c08ed0bc007c8ed8b96900be547cb81990e87a00f21f4179686d1f816d2280ec598769288ae057d22b9153813793 >> [main.db] Zeus-1 >> (Clam)=8ed0bc007c8ed8b96900be547cb85090e87a00bb540836212656f61459f99320fc105fc3ab1e9d62da1ad66ec8 >> [main.mdb] 2048:88e9fa738b206e687f16ab76bfcbf149:Trojan.Spy.Zeus >> [main.mdb] 35840:e9767c30a483450fb1c2c777d4826be7:Trojan.Spy.Zeus-1 >> [main.mdb] 34816:04666acca8a323708585456c01cc15f8:Trojan.Spy.Zeus-2 >> [main.mdb] 37376:de73df1274f195e9ce2a4192e37d17ba:Trojan.Spy.Zeus-3 >> [main.mdb] 5120:9271dcaa30e5f951b3519fcc4a4fe775:Trojan.Spy.Zeus-4 >> [main.mdb] 34816:64a83405aed1a687db904b0da6dc182b:Trojan.Spy.Zeus-5 >> >> Regards, >> -- >> -Chuck >> >> _______________________________________________ >> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net >> http://www.clamav.net/support/ml > > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
