[Community-sigs] Win.Trojan.Injector_BFSU signature
Douglas Goddard
dgoddard at sourcefire.com
Thu Oct 30 10:11:50 EDT 2014
Would it be alright to change the name to Win.Trojan.Rubinurd? It looks
like InjectorBFSU is specific to ESET, where Rubinurd is a bit more popular
on VT.
Thanks,
Douglas
On Wed, Oct 29, 2014 at 10:09 PM, Willian Cruz <
willianalbertocruz at outlook.com.br> wrote:
> Good night guys,
>
> Here's another sig:
>
>
> Win.Trojan.Injector_BFSU;Target:1;(0&1&2&3);726F7564616E782E657865;46006C006100730068;410064006F00620065;49006E007300740061006C006C00650072
>
> Files used:
> 62f4b5089630157b41b21f21c102b9c5736011d684a97fe4a94246237a986b34
> 7602c31b6b165344ae45447fd432ac24f96aa26bc2fa70e65084ce56b9e54ab9
> 01ed8c30754250792db4231de748c4235417061343b6dba81285c9147ade2420
> a0990a1e882958c7c34f241056e2105467d9da96a58fdf32cc06714b82607ebe
>
> Willian
>
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
>
> http://www.clamav.net/contact.html#ml
>
More information about the Community-sigs
mailing list