ClamAV's current signature for Floxif misses newer samples, so I made it slightly more generic. WIN.Virus.Floxif:1:*:894424F8E8{4}C3FF608BEC83C5245464A1300000008B400C8B701CAD