Hi All, EquationAPT is in the news... so in case this is useful...
copy the following to EquationAPT.hdb: 03718676311de33dd0b8f4f18cffd488:376320:Sanesecurity.Rogue.EquationAPT.1 0a209ac0de4ac033f31d6ba9191a8f7a:184320:Sanesecurity.Rogue.EquationAPT.2 11fb08b9126cdb4668b3f5135cf7a6c5:212480:Sanesecurity.Rogue.EquationAPT.3 24a6ec8ebf9c0867ed1c097f4a653b8d:163840:Sanesecurity.Rogue.EquationAPT.4 2a12630ff976ba0994143ca93fecd17f:221184:Sanesecurity.Rogue.EquationAPT.5 4556ce5eb007af1de5bd3b457f0b216d:380928:Sanesecurity.Rogue.EquationAPT.6 6fe6c03b938580ebf9b82f3b9cd4c4aa:62464:Sanesecurity.Rogue.EquationAPT.7 752af597e6d9fd70396accc0b9013dbe:132608:Sanesecurity.Rogue.EquationAPT.8 9180d5affe1e5df0717d7385e7f54386:17920:Sanesecurity.Rogue.EquationAPT.9 9b1ca66aab784dc5f1dfe635d8f8a904:573440:Sanesecurity.Rogue.EquationAPT.10 For those using rogue.hdb detection is there already. clamscan --datbase=EquationAPT.hdb --infected etc. etc. Cheers, Steve Web : sanesecurity.com Blog: sanesecurity.blogspot.com _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
