[Community-sigs] Win.Trojan.Fosniw

[Ben Baker]

Thanks Askar, I'll queue it up for FP testing.

On Mon, Aug 15, 2016 at 12:55 PM, Askar Dyussekeyev <dyussekeyev at yandex.kz>
wrote:

> Win.Trojan.Fosniw:1:17584:558BEC83EC08894DFC8B4DFCE8????
> ????3B45087305E8????????8B45FC8B48183B4D0873158B55FC8B
> 4214508B4D08518B4DFCE8????????EB4A0FB6550C85D27432837D081073
> 2C8B45FC8B4D083B481473088B55088955F8EB098B45FC8B4814894DF88B
> 55F8526A018B4DFCE8????????EB10837D0800750A6A008B4DFCE8????????
> 33C03B45081BC0F7D88BE55DC20800
>
> signature looks for specific block of code
>
> detections (64):
> 01b861259fff684348ddfdf8bc1096e3
> 0210a58d3591ba65b91f49218f045dcd
> 025b4f73f11133195f18e6898bc7afb8
> 02b6b177229f5e0359d4d439c6d68756
> 038d7efc1bf885449bb3bbf6c5f02a80
> 0d5213d74f1082981b0c3b35659f4058
> 18e4d91aa01348bd3178a8713e2e80ed
> 1a8db096ab6c235e3f6bdadb160979c9
> 22a3d2b965d6a3cbe82f21fac0850e23
> 24de81d5006b36567d01c3c9d35b31cc
> 2ea5a8de1c4de5275a0687fa37049563
> 36c84db1291f0e55a8e7d3b5e51720d4
> 37d3ef46e94c6e3df1df88e471fb21de
> 39030db69b7a33f36f5f0327279cf954
> 3cdb1d846caf28ef87fe0fd96f43a549
> 400d0d96fc0264b7536cfd0196564344
> 428adf82bf11f05ba81c04cd419e2489
> 441a2329fb5b1504eaab3586ad01a9a1
> 45a63098f5ae00ec18bdab4b4934224d
> 4668b7822f5b094a3d97f76661adfae3
> 49c1a45911546efba1a378e9d6dd5757
> 49ed9bbdd66ffb67160a20233b1d8cf8
> 4a4d2c6b89f2ce2a21689ae7d77782e0
> 4d063d6cb8d2e16c8669faa32c10f334
> 52babcf9d5090781aa35a767f3a8e1dd
> 580239a4820aba2664cb9be4e21d0762
> 58216329ead30423caf4da3adc2727f9
> 65fb6c28d297fcfe4264c445e3c66d8f
> 6701156ca9403ed7f8f59e97f3c38936
> 6754dcf6cb598c65cc81bcf7bac57f40
> 69a363104a585a5274c33e911aea7276
> 6f374882a5c2d84b96a1521a4198b080
> 73f885b228cc80db7623220f07425f9c
> 77865e42e8e089f3b29ff80248e45537
> 7a547ef9620f09ac332216521aad5c23
> 7ced5fc8890179b57e78977b11e8a8f2
> 7ec79d01c3b2f7611929bb949620236a
> 83de59925779e0a5cad18b013ca618d9
> 8559cc69ab58ca538177ce36db4aa5b2
> 85c02dd77ddfc6180db473815c420632
> 8a156cd55f7c64501674637cda88f1a4
> 8f2ca05bfeb3fe966250447105a853f9
> 91aa3a4c5ecda23e76668d9a47de9b75
> 9785648d59f3de882460994422eeccb5
> a046c8c8b5e9689c847654da92a07966
> a3a01a7dd38ad8dd88306a1a5e433009
> b1bb24e000133b66ffb28bbb68807c8c
> b20a9bbb09271c6a93737b1d1829fe56
> b4ac0716fb6693127ab0006e4d0d9d7a
> ba3111e9b723a297463f95a77df10544
> bb1444f4cbd6c19f639d9e3d94fd0ec4
> be335f6a27afc49c7d22d15e679cde49
> c410cca5233a18aefc22e6ae65be714a
> c6a39d54f8a11c85f35546bf0570333a
> d064ff188180280afc8ca14ccad0d46c
> d08f18df8700f756bbc6d6b467d2e700
> d59b373c0479de80b7ca696cc37b5d61
> d82ab7eb0d1e48a16d2c7e3994bde825
> dba79fd0336d0cf8dea6a56c30c18c8a
> e7a4b423dd6ec9667aec69c6cb8c9f0f
> e7f82bb481968518e4353e599729dfad
> f8f44bfafdd1f7fd14fd2c9f19eef121
> fa9b28b2daca32ce5fbb9b0a09cb3116
> ffc30234d3a04d4a9f226a7b28e8f0f6
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
>
> http://www.clamav.net/contact.html#ml
>