Hello, > Looks like there is no signature for petya yet. > > May be somebody have some? I have published a generic signature from the javascript infector I had. https://www.securiteinfo.com/services/anti-spam-anti-virus/improve-detection-rate-of-zero-day-malwares-for-clamav.shtml -- Cordialement, Arnaud Jacques Gérant de SecuriteInfo.com