[Community-sigs] Adware.Win32.Wajam signature

Alain Zidouemba azidouemba at sourcefire.com
Tue Oct 21 20:11:14 EDT 2014


Thanks Willian. Your signature will be reviewed for inclusion in the
signature set.

Thanks,

- Alain

On Tuesday, October 21, 2014, Willian Cruz <
willianalbertocruz at outlook.com.br> wrote:

> This malware is very popular on computers that I fix, so I decided to
> focus my efforts on creating a signature for it.
>
>
> Adware.Win32.Wajam;Target:1;(0&1&2&3&4)|(5&6&7&8&9)|(10&11&12&13);085D010000000000000000001E5D010000200000;57616A616D496E7465726E6574456E68616E6365722E657865;434552545F46696E644365727442794E69636B6E616D654F72456D61696C41646472;44656C657465546F6B656E43657274416E644B6579;55736572496D706572736F6E617465;244504000000000000000000C84A040004A20300;5445040000000000000000009045040034A20300;687474703A2F2F7777772E77616A616D2E636F6D2F70726F78792F6D616E6966657374;570061006A0061006D00200049006E007400650072006E0065007400200045006E00680061006E00630065007200200053006500720076006900630065;70726F78795F73657474696E67;A0AD000000000000000000002AB0000000900000;44004F004D00410049004E0020006500720072006F0072;6D00730063006F007200650065002E0064006C006C;530049004E00470020006500720072006F0072
>
> SHA256 of files I used:
> 3e50fabe5138422b1ea389dee1b8ed281e53c14e33e6ece10c158afb4b1b0a18
> b4c8cf459b0d288417ca5503038fba47e750869dead8cdd4efb55a4fdeba7723
> 7784b31868bbb79b90b9c2a9e49036973c9a34d644d434c0e808c43ba86c5428
>
> I'll focus on two more popular viruses and I should release the signatures
> soon.
>
> Willian
>
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net <javascript:;>
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
>
> http://www.clamav.net/contact.html#ml
>



More information about the Community-sigs mailing list