[Community-sigs] new vbs sig

[Joel Esler (jesler)]

May or may not be aware. But we have this:

http://www.clamav.net/reports/signature

Which makes things considerably easier.

Sent from my iPhone

On Aug 18, 2017, at 8:29 AM, Jean-Baptiste Lanel <jb at lanel.eu<mailto:jb at lanel.eu>> wrote:

Hello again,

Forgot to precise : password is "virus".

JB

Le 2017-08-18 14:23, Jean-Baptiste Lanel a ?crit :
Hello,

Just made a new sig :

VBS.Dwnl:7:*:6d61726b6574706c616365203d20726466676f28

It seems rather odd but so far catched a lot (see samples, for
decrypting with openssl : openssl enc -d -aes256 -in sample.tar.gz.enc
-out sample.tar.gz)

Regards,

JB
_______________________________________________
Community-sigs mailing list
Community-sigs at lists.clamav.net<mailto:Community-sigs at lists.clamav.net>
http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs

http://www.clamav.net/contact.html#ml

_______________________________________________
Community-sigs mailing list
Community-sigs at lists.clamav.net<mailto:Community-sigs at lists.clamav.net>
http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs

http://www.clamav.net/contact.html#ml