[Community-sigs] Win.Trojan.Injector_BFSU signature

Willian Cruz willianalbertocruz at outlook.com.br
Thu Oct 30 12:26:12 EDT 2014


No problems for me ;)
I don't care that much for names, as long that the sig works

Willian

> Date: Thu, 30 Oct 2014 10:11:50 -0400
> From: dgoddard at sourcefire.com
> To: community-sigs at lists.clamav.net
> Subject: Re: [Community-sigs] Win.Trojan.Injector_BFSU signature
> 
> Would it be alright to change the name to Win.Trojan.Rubinurd? It looks
> like InjectorBFSU is specific to ESET, where Rubinurd is a bit more popular
> on VT.
> 
> Thanks,
> Douglas
> 
> On Wed, Oct 29, 2014 at 10:09 PM, Willian Cruz <
> willianalbertocruz at outlook.com.br> wrote:
> 
> > Good night guys,
> >
> > Here's another sig:
> >
> >
> > Win.Trojan.Injector_BFSU;Target:1;(0&1&2&3);726F7564616E782E657865;46006C006100730068;410064006F00620065;49006E007300740061006C006C00650072
> >
> > Files used:
> > 62f4b5089630157b41b21f21c102b9c5736011d684a97fe4a94246237a986b34
> > 7602c31b6b165344ae45447fd432ac24f96aa26bc2fa70e65084ce56b9e54ab9
> > 01ed8c30754250792db4231de748c4235417061343b6dba81285c9147ade2420
> > a0990a1e882958c7c34f241056e2105467d9da96a58fdf32cc06714b82607ebe
> >
> > Willian
> >
> > _______________________________________________
> > Community-sigs mailing list
> > Community-sigs at lists.clamav.net
> > http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
> >
> > http://www.clamav.net/contact.html#ml
> >
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
> 
> http://www.clamav.net/contact.html#ml
 		 	   		  


More information about the Community-sigs mailing list