[clamav-users] petya signature?

[Dmitry Melekhov]

28.06.2017 17:23, Alain Zidouemba пишет:
> This went out yesterday to address the latest variant:
>
> Win.Ransomware.Agent-6331177-0

Unfortunately, virus samples from here 
https://gist.github.com/vulnersCom/65fe44d27d29d7a5de4c176baba45759
аre not detected :

  clamscan 
027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745_98STJd8lju.bin.gz 

027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745_98STJd8lju.bin.gz: 
OK

----------- SCAN SUMMARY -----------
Known viruses: 10130779
Engine version: 0.99.2
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 1.20 MB
Data read: 0.30 MB (ratio 4.04:1)
Time: 16.812 sec (0 m 16 s)


>
>
> Additionally, there are over 70 signatures that contain the keyword "Petya"
> in their name.
>
> Alain
>
>
> On Wed, Jun 28, 2017 at 2:51 AM, Dmitry Melekhov <dm at belkam.com> wrote:
>
>> Hello!
>>
>> Looks like there is no signature for petya yet.
>>
>> May be somebody have some?
>>
>>
>> Thank you!
>>
>> _______________________________________________
>> clamav-users mailing list
>> clamav-users at lists.clamav.net
>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>>
>>
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>>
>> http://www.clamav.net/contact.html#ml
>>
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml