Thank you Chuck (and Alain as well) for the list.
Zvi
----- Original Message -----
From: "Chuck Swiger" <cswi...@mac.com>
To: "ClamAV users ML" <clamav-users@lists.clamav.net>
Sent: Thursday, February 21, 2013 8:33 PM
Subject: Re: [clamav-users] ZEUS virus
Hi--
On Feb 21, 2013, at 10:28 AM, Zvi Kave wrote:
Is there a signature for ZEUS virus in ClamAV ?
Yes, there are several ZEUS signatures:
% sigtool -fZeus
[daily.mdb] 2560:34a6f6e6bb8d80fa52b9521dcfc1577d:Win.Trojan.Zeus-1
[daily.mdb] 51388:a3571f6881a9a8b84593c79796131e5a:Win.Trojan.Zeus-2
[daily.ndb]
Win.Trojan.Zeus:1:*:77000000696e66322e646174000000004655434b00000000
[main.db] Zeus
(Clam)=c08ed0bc007c8ed8b96900be547cb81990e87a00f21f4179686d1f816d2280ec598769288ae057d22b9153813793
[main.db] Zeus-1
(Clam)=8ed0bc007c8ed8b96900be547cb85090e87a00bb540836212656f61459f99320fc105fc3ab1e9d62da1ad66ec8
[main.mdb] 2048:88e9fa738b206e687f16ab76bfcbf149:Trojan.Spy.Zeus
[main.mdb] 35840:e9767c30a483450fb1c2c777d4826be7:Trojan.Spy.Zeus-1
[main.mdb] 34816:04666acca8a323708585456c01cc15f8:Trojan.Spy.Zeus-2
[main.mdb] 37376:de73df1274f195e9ce2a4192e37d17ba:Trojan.Spy.Zeus-3
[main.mdb] 5120:9271dcaa30e5f951b3519fcc4a4fe775:Trojan.Spy.Zeus-4
[main.mdb] 34816:64a83405aed1a687db904b0da6dc182b:Trojan.Spy.Zeus-5
Regards,
--
-Chuck
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
