Re: [clamav-users] ZEUS virus
$ sigtool -fZbot | wc -l 38480 If that adds anything. On Feb 21, 2013, at 1:49 PM, Zvi Kave wrote: > Thank you Chuck (and Alain as well) for the list. > > Zvi > > - Original Message - From: "Chuck Swiger" > To: "ClamAV users ML" > Sent: Thursday, February 21, 2013 8:33 PM > Subject: Re: [clamav-users] ZEUS virus > > >> Hi-- >> >> On Feb 21, 2013, at 10:28 AM, Zvi Kave wrote: >>> Is there a signature for ZEUS virus in ClamAV ? >> >> Yes, there are several ZEUS signatures: >> >> % sigtool -fZeus >> [daily.mdb] 2560:34a6f6e6bb8d80fa52b9521dcfc1577d:Win.Trojan.Zeus-1 >> [daily.mdb] 51388:a3571f6881a9a8b84593c79796131e5a:Win.Trojan.Zeus-2 >> [daily.ndb] >> Win.Trojan.Zeus:1:*:7700696e66322e6461744655434b >> [main.db] Zeus >> (Clam)=c08ed0bc007c8ed8b96900be547cb81990e87a00f21f4179686d1f816d2280ec598769288ae057d22b9153813793 >> [main.db] Zeus-1 >> (Clam)=8ed0bc007c8ed8b96900be547cb85090e87a00bb540836212656f61459f99320fc105fc3ab1e9d62da1ad66ec8 >> [main.mdb] 2048:88e9fa738b206e687f16ab76bfcbf149:Trojan.Spy.Zeus >> [main.mdb] 35840:e9767c30a483450fb1c2c777d4826be7:Trojan.Spy.Zeus-1 >> [main.mdb] 34816:04666acca8a323708585456c01cc15f8:Trojan.Spy.Zeus-2 >> [main.mdb] 37376:de73df1274f195e9ce2a4192e37d17ba:Trojan.Spy.Zeus-3 >> [main.mdb] 5120:9271dcaa30e5f951b3519fcc4a4fe775:Trojan.Spy.Zeus-4 >> [main.mdb] 34816:64a83405aed1a687db904b0da6dc182b:Trojan.Spy.Zeus-5 >> >> Regards, >> -- >> -Chuck >> >> ___ >> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net >> http://www.clamav.net/support/ml > > ___ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] ZEUS virus
Thank you Chuck (and Alain as well) for the list. Zvi - Original Message - From: "Chuck Swiger" To: "ClamAV users ML" Sent: Thursday, February 21, 2013 8:33 PM Subject: Re: [clamav-users] ZEUS virus Hi-- On Feb 21, 2013, at 10:28 AM, Zvi Kave wrote: Is there a signature for ZEUS virus in ClamAV ? Yes, there are several ZEUS signatures: % sigtool -fZeus [daily.mdb] 2560:34a6f6e6bb8d80fa52b9521dcfc1577d:Win.Trojan.Zeus-1 [daily.mdb] 51388:a3571f6881a9a8b84593c79796131e5a:Win.Trojan.Zeus-2 [daily.ndb] Win.Trojan.Zeus:1:*:7700696e66322e6461744655434b [main.db] Zeus (Clam)=c08ed0bc007c8ed8b96900be547cb81990e87a00f21f4179686d1f816d2280ec598769288ae057d22b9153813793 [main.db] Zeus-1 (Clam)=8ed0bc007c8ed8b96900be547cb85090e87a00bb540836212656f61459f99320fc105fc3ab1e9d62da1ad66ec8 [main.mdb] 2048:88e9fa738b206e687f16ab76bfcbf149:Trojan.Spy.Zeus [main.mdb] 35840:e9767c30a483450fb1c2c777d4826be7:Trojan.Spy.Zeus-1 [main.mdb] 34816:04666acca8a323708585456c01cc15f8:Trojan.Spy.Zeus-2 [main.mdb] 37376:de73df1274f195e9ce2a4192e37d17ba:Trojan.Spy.Zeus-3 [main.mdb] 5120:9271dcaa30e5f951b3519fcc4a4fe775:Trojan.Spy.Zeus-4 [main.mdb] 34816:64a83405aed1a687db904b0da6dc182b:Trojan.Spy.Zeus-5 Regards, -- -Chuck ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] ZEUS virus
Look for "Zbot" signatures as well. - Alain ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [clamav-users] ZEUS virus
Hi-- On Feb 21, 2013, at 10:28 AM, Zvi Kave wrote: > Is there a signature for ZEUS virus in ClamAV ? Yes, there are several ZEUS signatures: % sigtool -fZeus [daily.mdb] 2560:34a6f6e6bb8d80fa52b9521dcfc1577d:Win.Trojan.Zeus-1 [daily.mdb] 51388:a3571f6881a9a8b84593c79796131e5a:Win.Trojan.Zeus-2 [daily.ndb] Win.Trojan.Zeus:1:*:7700696e66322e6461744655434b [main.db] Zeus (Clam)=c08ed0bc007c8ed8b96900be547cb81990e87a00f21f4179686d1f816d2280ec598769288ae057d22b9153813793 [main.db] Zeus-1 (Clam)=8ed0bc007c8ed8b96900be547cb85090e87a00bb540836212656f61459f99320fc105fc3ab1e9d62da1ad66ec8 [main.mdb] 2048:88e9fa738b206e687f16ab76bfcbf149:Trojan.Spy.Zeus [main.mdb] 35840:e9767c30a483450fb1c2c777d4826be7:Trojan.Spy.Zeus-1 [main.mdb] 34816:04666acca8a323708585456c01cc15f8:Trojan.Spy.Zeus-2 [main.mdb] 37376:de73df1274f195e9ce2a4192e37d17ba:Trojan.Spy.Zeus-3 [main.mdb] 5120:9271dcaa30e5f951b3519fcc4a4fe775:Trojan.Spy.Zeus-4 [main.mdb] 34816:64a83405aed1a687db904b0da6dc182b:Trojan.Spy.Zeus-5 Regards, -- -Chuck ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
[clamav-users] ZEUS virus
Hi, Is there a signature for ZEUS virus in ClamAV ? Zvi ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml