[Community-sigs] new vbs sig

Michael Cichosz michael.cichosz at gmx.de
Wed Aug 23 00:25:19 EDT 2017


Dear Joel, 
i tried it more times with my last signatures, i was not sure if it was working well. so i ask Christopher for help. when i have any Problems in providing my sigs in the 
future, i will let you know 1st.thanks

Michael Cichosz (mcichosz _at_ clamav.net)       ClamAV, a GPL anti-virus toolkit| PGP key id 04B57A3D


> Gesendet: Mittwoch, 23. August 2017 um 00:43 Uhr
> Von: "Joel Esler (jesler)" <jesler at cisco.com>
> An: "ClamAV Community Signatures Submission List" <community-sigs at lists.clamav.net>
> Betreff: Re: [Community-sigs] new vbs sig
>
> The code says it correct, and the mailer looks to be setup correctly.
> 
> Maybe no one has used it?
> 
> --
> Joel Esler | Talos: Manager | jesler at cisco.com<mailto:jesler at cisco.com>
> 
> 
> 
> 
> 
> 
> On Aug 22, 2017, at 10:49 AM, Christopher Marczewski <cmarczewski at sourcefire.com<mailto:cmarczewski at sourcefire.com>> wrote:
> 
> Hello Michael,
> 
> Yes, feel free to send them to the mailer while we look into the form.
> 
> On Fri, Aug 18, 2017 at 4:29 PM, Michael Cichosz <michael.cichosz at gmx.de<mailto:michael.cichosz at gmx.de>>
> wrote:
> 
> Dear Christopher,
> my last samples/signatures seems not added to the db. i send both twice
> via submission form. if its ok i will send you both via mail. thanks
> 
> Michael Cichosz (mcichosz _at_ clamav.net<http://clamav.net>)       ClamAV, a GPL anti-virus
> toolkit
> 
> 
> Gesendet: Freitag, 18. August 2017 um 17:28 Uhr
> Von: "Christopher Marczewski" <cmarczewski at sourcefire.com<mailto:cmarczewski at sourcefire.com>>
> An: "ClamAV Community Signatures Submission List" <
> community-sigs at lists.clamav.net<mailto:community-sigs at lists.clamav.net>>
> Betreff: Re: [Community-sigs] new vbs sig
> 
> Hello Jean-Baptiste,
> 
> Thank you for your submission. We're currently reviewing the signature &
> will keep you posted.
> 
> On Fri, Aug 18, 2017 at 8:23 AM, Jean-Baptiste Lanel <jb at lanel.eu<mailto:jb at lanel.eu>>
> wrote:
> 
> Hello,
> 
> Just made a new sig :
> 
> VBS.Dwnl:7:*:6d61726b6574706c616365203d20726466676f28
> 
> It seems rather odd but so far catched a lot (see samples, for
> decrypting
> with openssl : openssl enc -d -aes256 -in sample.tar.gz.enc -out
> sample.tar.gz)
> 
> Regards,
> 
> JB
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net<mailto:Community-sigs at lists.clamav.net>
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
> 
> http://www.clamav.net/contact.html#ml
> 
> 
> 
> 
> --
> --
> Christopher Marczewski
> Research Engineer
> Talos Group
> cmarczewski at sourcefire.com<mailto:cmarczewski at sourcefire.com>
> Phone: 443.832.2975
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
> 
> http://www.clamav.net/contact.html#ml
> 
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net<mailto:Community-sigs at lists.clamav.net>
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
> 
> http://www.clamav.net/contact.html#ml
> 
> 
> 
> 
> --
> --
> Christopher Marczewski
> Research Engineer
> Talos Group
> cmarczewski at sourcefire.com<mailto:cmarczewski at sourcefire.com>
> Phone: 443.832.2975
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
> 
> http://www.clamav.net/contact.html#ml
> 
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
> 
> http://www.clamav.net/contact.html#ml
>



More information about the Community-sigs mailing list