[Community-sigs] Win.Adware.ForceStartPage
Askar Dyussekeyev
dyussekeyev at yandex.kz
Sun Jul 31 05:47:56 EDT 2016
Win.Adware.ForceStartPage:1:362963:6A0068000100006A006A008BC3E8C7B1FAFF508B45F050E885E1FCFF8945EC837DEC00750AE82BA7FAFFE98301000085FF742B6A006A026A006A008B45EC50E86DE1FCFF8BD86A006A006A006A008B45EC50E85AE1FCFF83FBFF7E02891F837DF80074078B45F833D28910B800040000E8F093FAFF8BD8E8B1CEFAFF8945E433C08945E0C745DCE8030000C645DB00
signature looks for specific block of code
detections (758):
00009cbc0a90337e4c30950a51ae3d67
0077a2459c6af97598e9ecd6d4f96b02
01b76d78cdc574eda80b3bc59267d405
01bc45730de8bc6d08dc78cf2e1fe18b
................................
ff3ba06ee6a9c394dbaa08c512e9e112
ff6ffc956b49bb299f41c74b47ddddc6
ffdddced89d1eca435c80fb7d81c389a
More information about the Community-sigs
mailing list