Hallo,
Am 22.03.2017 um 15:12 schrieb Kees Theunissen:
On Wed, 22 Mar 2017, Hajo Locke wrote:
thank you steve. i could find the lines and removed them. How could you decode
this signature?
~$ sigtool --find-sigs Html.Phishing.Auction-214 | sigtool --decode-sigs
VIRUS NAME: Html.Phishing.Auct
On Wed, 22 Mar 2017, Hajo Locke wrote:
> thank you steve. i could find the lines and removed them. How could you decode
> this signature?
~$ sigtool --find-sigs Html.Phishing.Auction-214 | sigtool --decode-sigs
VIRUS NAME: Html.Phishing.Auction-214
TARGET TYPE: HTML
OFFSET: *
DECODED SIGNATURE:
Hello,
Am 22.03.2017 um 14:01 schrieb Steve Basford:
On Wed, March 22, 2017 12:52 pm, Hajo Locke wrote:
Hello,
have an issue here with this signature. Html.Phishing.Auction-214 is found
VIRUS NAME: Html.Phishing.Auction-214
Here you go...
TARGET TYPE: HTML
OFFSET: *
DECODED SIGNATURE:
sein
On Wed, March 22, 2017 12:52 pm, Hajo Locke wrote:
> Hello,
>
>
> have an issue here with this signature. Html.Phishing.Auction-214 is found
VIRUS NAME: Html.Phishing.Auction-214
Here you go...
TARGET TYPE: HTML
OFFSET: *
DECODED SIGNATURE:
sein, weil sie ei[][][]nen fehler gemacht haben, als si
Hello,
have an issue here with this signature.
Html.Phishing.Auction-214 is found within an small sql-file. i try to
find corresponding text to remove it, but iam not successful.
If i split my sqlfile in parts with 1000 lines and scan that parts, so
every part is clean, virus is only detected i