[clamav-users] EquationAPT sigs

Steve Basford steveb_clamav at sanesecurity.com
Thu Feb 19 04:05:15 EST 2015


Hi All,

EquationAPT is in the news... so in case this is useful...

copy the following to EquationAPT.hdb:

03718676311de33dd0b8f4f18cffd488:376320:Sanesecurity.Rogue.EquationAPT.1
0a209ac0de4ac033f31d6ba9191a8f7a:184320:Sanesecurity.Rogue.EquationAPT.2
11fb08b9126cdb4668b3f5135cf7a6c5:212480:Sanesecurity.Rogue.EquationAPT.3
24a6ec8ebf9c0867ed1c097f4a653b8d:163840:Sanesecurity.Rogue.EquationAPT.4
2a12630ff976ba0994143ca93fecd17f:221184:Sanesecurity.Rogue.EquationAPT.5
4556ce5eb007af1de5bd3b457f0b216d:380928:Sanesecurity.Rogue.EquationAPT.6
6fe6c03b938580ebf9b82f3b9cd4c4aa:62464:Sanesecurity.Rogue.EquationAPT.7
752af597e6d9fd70396accc0b9013dbe:132608:Sanesecurity.Rogue.EquationAPT.8
9180d5affe1e5df0717d7385e7f54386:17920:Sanesecurity.Rogue.EquationAPT.9
9b1ca66aab784dc5f1dfe635d8f8a904:573440:Sanesecurity.Rogue.EquationAPT.10

For those using rogue.hdb detection is there already.

clamscan --datbase=EquationAPT.hdb --infected etc. etc.

Cheers,

Steve
Web : sanesecurity.com
Blog: sanesecurity.blogspot.com




More information about the clamav-users mailing list