[clamav-users] EquationAPT sigs

polloxx polloxx at gmail.com
Thu Feb 19 08:14:29 EST 2015


Thanks Steve.

On Thu, Feb 19, 2015 at 10:05 AM, Steve Basford <
steveb_clamav at sanesecurity.com> wrote:

> Hi All,
>
> EquationAPT is in the news... so in case this is useful...
>
> copy the following to EquationAPT.hdb:
>
> 03718676311de33dd0b8f4f18cffd488:376320:Sanesecurity.Rogue.EquationAPT.1
> 0a209ac0de4ac033f31d6ba9191a8f7a:184320:Sanesecurity.Rogue.EquationAPT.2
> 11fb08b9126cdb4668b3f5135cf7a6c5:212480:Sanesecurity.Rogue.EquationAPT.3
> 24a6ec8ebf9c0867ed1c097f4a653b8d:163840:Sanesecurity.Rogue.EquationAPT.4
> 2a12630ff976ba0994143ca93fecd17f:221184:Sanesecurity.Rogue.EquationAPT.5
> 4556ce5eb007af1de5bd3b457f0b216d:380928:Sanesecurity.Rogue.EquationAPT.6
> 6fe6c03b938580ebf9b82f3b9cd4c4aa:62464:Sanesecurity.Rogue.EquationAPT.7
> 752af597e6d9fd70396accc0b9013dbe:132608:Sanesecurity.Rogue.EquationAPT.8
> 9180d5affe1e5df0717d7385e7f54386:17920:Sanesecurity.Rogue.EquationAPT.9
> 9b1ca66aab784dc5f1dfe635d8f8a904:573440:Sanesecurity.Rogue.EquationAPT.10
>
> For those using rogue.hdb detection is there already.
>
> clamscan --datbase=EquationAPT.hdb --infected etc. etc.
>
> Cheers,
>
> Steve
> Web : sanesecurity.com
> Blog: sanesecurity.blogspot.com
>
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>



More information about the clamav-users mailing list