File: signatures.txt

package info (click to toggle)
libfile-scan-perl 1.43-1.1
  • links: PTS
  • area: main
  • in suites: lenny
  • size: 308 kB
  • ctags: 58
  • sloc: perl: 1,385; sh: 88; makefile: 53
file content (214 lines) | stat: -rw-r--r-- 31,973 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
20050504::4d5a::W32/Bagle.ai@MM::(ge1024 and le3072) or eq25600::d032c532c232c6d2c002c1.{0,24}d3c28807474975d2e801000000
20050504::4d5a900003::W32/Sober.p@MM::eq8192::0325f6bfc0435c0a2b65696e61686e756e6725d61eb23970170000020430153e
20050504::4d5a::W32/Mytob.gen@MM::eq13312 or (ge24576 and le36864)::79.{3,81}[2a65b045]7243[04a29e1e][ec8ff862]
20050305::4d5a900003::W32/Mydoom.ba@MM::eq5120::6f70656e134d6f7a5f6c615f7051c32f34eb285c0269626c655fa0708429c74243b6fb61534c4fd167fe5b9268747470736572764c617baede75c76223494337
20050305::4d5a900003::W32/Downloader-PH::eq9216::6e74703a2f2f6305c5826a79632e6d2f6130621bd56c692f6910b3a27b6670689e11ba13703f7569643dc581d3c9703d37267669881950313d74727900
20050305::4d5a900003::W32/MyWife.b@MM::eq2048::426c61[63bd].{0,4}6b576f726d
20050305::4d5a::PWS-Banker.k.gen::ge8192 and le15360::62.?61.?6c9f.{0,4}af21.{0,4}3c.{0,5}31726d.{0,5}200d43.?70.?75.?740f6e.{2,6}7b.{2,6}4a252f343e.{0,5}a1.?79.?7024.{0,4}50.{0,4}6f63.?456d.?61.?69.{0,4}6c.72.35.{3,4}65.{1,5}6b.{4,9}0d.{0,4}75.{2}45.{0,4}4c2d6c.?436f.?6e.{1,5}1f.{0,4}d9.{0,5}0d2f.{0,5}6db8.{2,6}446973.{2,3}6c.{1,5}3d.{8,9}47ca.?3c.?0d6e.{1,6}65.{0,4}0a.{0,5}41.?4f53.?54c9.6461.{0,5}51
20050305::4d5a900003::W32/Sober.j@MM::eq3072 or eq8192::50726f6a65.{22,35}43.{13,28}4fad339966cf11b7.{3}d393.{6,7}3b.{3,25}466f726d
20050219::4d5a000000::W32/Mydoom.bb@MM::eq1024::0f4d6170565fc5774f6618101e556e566d11902f62087273b3300c99456e76226fdf52fc7b3c5661fbe662ac1967441a76b15479704c0f53f5bf6c8e6d546979
20041221::4d5a900003::W32/Netsky.z@MM::eq2048::033bb839912333001a2ff978490085242164b88900830bc8282a53140608a121704a4202a52451588c108a43f90471704140680a98a6380a2e145185c104b388
20041221::4d5a000000::W32/Zafi.d@MM::eq10240::48454c4f441d4d4149ecc81e52bc6e5dc3435054
20041122::4d5a900003::W32/Lovgate.af@MM::eq5120::328300029a032a800b1c6db6b236db7371b6d64391b191cdcc8dac8e4c93236b71b1916e36db628de509da13942768ce7f3eaf794276ffbe7bad521e8f35e191
20041122::4d5a900003::W32/Lovgate.q@MM::eq5120::02aa00029a02a8000aa4971b6db62e36dcb8ee36dae46db727236d5c6db771b6db9717249917bf9dfcee0df67fcff8dfdad611dd56ea820be07f02d5e5f402f4
20041106::VBS::VBS/Inor.encoded::0::23407e5e2f77454141413d3d39623a7e7e664023402666623a2c613a5e402340262f394e43787253433a45402340263f2b447e613a5e507b502f446e43442b36
20041106::4d5a900003::W32/Netsky.ab@MM::eq2048::1f64170756af8585db8f0a53c9ffdb11e23f4f784303304c5920b108c90d420804567432e1e58a916c9a40104c24c17f
20041106::4d5a900003::W32/Bagz.f@MM::eq17408::4765744c61324102766550da7616bbae7570130f57956426d010f1df87657373616765426fc473796135be2533322e64
20041030::4d5a900003::Generic PWS.f::eq12288::217376686f73742e657865277b[^7d]{32,}7d534f46
20041018::4d5a900003::W32/Korgo.worm.aa::eq2048::2f299f4f6f906182b546b187125e6fd1c847ec1e5fb35b5a212239ae386bddd2e25d37b7dd204a76c7dc1df4de0ff4d55f205be836fddfaa53498476742558e71729
20041015::4d5a900003::W32/Darby@MM::eq9216::40004c624246feff56423521f01f56423645532e444c4c2a.{11,14}40
20041015::4d5a900003::W32/Netsky.ag@MM::eq1024::416c657669727573210c090208334f2f
20041012::4d5a900003::W32/Mabutu.a@MM::eq2048 or eq4096::52554e44.{0,4}4c4c33322e4558452025732c5f6d61696e524400446c6c526567697374657253.{2,5}76.{0,3}0000646c6c0065786500434c5349445c7b.{34,38}30317d00.{1,3}206d7574.{0,2}3120
20041007::4d5a::W32/Lovgate.x@MM::eq8192::96b46655d6c5a3e2464b4c5452616d93145681aec717a22f0c82ffe8242eb66a
20041006::4d5a900003::W32/Lovgate.r@MM::eq1024::400000c02e7273726300{4}1000{3}20030000020000005e0100{13}400000c02e61737061636b000020000000300300001a000000600100{13}400000c02e6461746100{4}10000000500300{6}7a0100{13}400000c02e6c6966060000000100{4}600300{6}7c0100b3dffdff6c5c0300{5}200000e0
20041006::4d5a900003::W32/Mydoom.o@MM::eq1024::5550583000{5}[a080d07060][0002]00001000{7}[0402]00{14}800000e05550583100{5}[90c06050]000000[b0e0908070][0200]0000[8abc604246]000000[0402]00{14}400000e02e7273726300{4}10000000[40a0f0d0c0][010300]0000[060408]000000[8e4ac06444]00{14}400000c0[000a]
20040918::4d5a900003::MultiDropper-KR::eq2048::00ad01ff606563686f72207770756e3325730664db3ee9610a53146c47160c2170e7676774e1737570c92ef978ea96170a717569740f
20040915::4d5a000001::W32/Bagle.aa@MM::ge10240 and le12288::2d2d204261673920417574684f22323961b76fee2e303402094765726d44792e7d6fff
20040911::4d5a000001::W32/Bagle.dll.dr::eq3072::5c67647166772e657865004d5a900003
20040911::4d5a900003::W32/Lovgate.ai@MM::eq2048::312e393000b6d1a5c90d09080a70862cdf135b4d1b2bdc04005bc90100000004002613ff89333280031a32b2800a24a8dd46aa39ec6d8a8e546db6db6db62a36db6dba8db9
20040817::HTMLJS::JS_IllWill::0::747269676765722e5374617274536f66747761726555706461746528657865706174682c20747269676765722e44454641554c545f4d4f444529
20040817::4d5a::W32/Netsky.p@MM::eq2048 or eq4096::0600420049004e00410052005900010030000000000000006b7d66859415ad1dd694ddc489e6393149adb558f0939732592bd1c0fd168e4e
20040721::4d5a900003::W32/Netsky.ac@MM::eq2048::83007c240801750aff74002404e80a00013059006a0158c20c00558b00ec8b4d0c33c0498300f9087766ff248d8f1610
20040717::4d5a::W32/Bagle.af@MM::eq11264 or eq13312::910400a8605458232323235c606468232323236c707478232323237c808488232323238c909498232323239ca0a4
20040710::4d5a000001::W32/Bagle.dll.gen::eq4096::60e801000000e883c404e801000000e95d81edd9214000e81b020000e8eb08eb02cd20ff24249a66be4746e8010000009a598d952b224000e801000000695866
20040706::HTMLVBS::W32/Bagle.ab@MM!hta::0::2c302c31342c33312c3138362c31342c302c3138302c392c3230352c33332c3138342c312c37362c3230352c33332c38342c3130342c3130352c3131352c3332
20040706::4d5a900003::W32/Lovgate.ac@MM::eq94208::393847022f2776d7f550694f766572c9
20040703::4d5a900003::W32/Netsky.w@MM::eq1024::5550583000{5}d00100001000{7}0200{14}800000e05550583100{5}6000{3}e00100005800{3}0200{14}400000e02e7273726300{4}1000{3}400200000400{3}5a00{14}400000c0312e323400555058210c090209e06efdee9e70b4a84e160200de550000009400
20040628::4d5a::W32/Netsky.c@MM::ge1024 and le5120::ed.{0,13}e8.{0,17}e9.{0,12}ffffff.{0,19}83
20040628::4d5a900003::W32/Netsky.f@MM::eq16384::0e415454610f5243502e204c4f6e3ccc183e234d1f41494c0746524f8a12b1024845ffe51d6dfcd208285c04392a2e50
20040628::4d5a::W32/Magistr.a@MM::eq1024::00{2}..00{13}[^00]0000.2e.{5}0000ec[^0004](00|01)0000..0000.(00|01)0000..00{13}.0000[^00][^2e]
20040619::4d5a000001::W32/Bagle.j@MM::le3072::5550583000{5}[a090e0]00{3}1000{7}0200{14}800000e05550583100{5}[305090]000000[b0f0a0]000000[2848468c]0000000200{14}[804060]00{1,2}[00f0]e0?2e7273726300{3,4}[6e7010]19?000000[e040f030][0001]0000[0c62061a]000000[2a4a488e]00{14}400000[c0f0]312e32[3034]00555058210c0902[0a08]
20040614::4d5a900003::W32/Zafi.b@MM::eq11264::c109f7288072edf83dcb1466a9fa6399e61784070c48454c4f444d3b4149f63d465278dd5d87435054ce5ef415b82b49
20040528::4d5a900003::W32/Mydoom@MM::eq5120 or (ge10240 and le15360) or eq45056::[ee9500952d02][1951]554954[8efa0da783f3].{6,27}41.{6,35}20.{0,55}[543e][4f6f7e]
20040522::4d5a900003::W32/Netsky@MM::eq6144 or (ge14336 and le22528)::[7c4c02]05?[20fc77]463c?52.{0,16}[4faf][574d][3a2b1211adb6].{12,49}54
20040519::4d5a900003::W32/Bobax.worm.c::eq2048::e851500000c35253b659b273f966e41d9807de15a594d01d547bf9346b97448fc6b0b9aa1170b4978cc30b3315a16005518980f525ba89a9fc3d677447ee9119
20040517::4d5a900003::W32/Sober@MM::ge6144 and le9216::2b0c01[9454cc2c].{2,7}6f6b756d.{0,4}656e74
20040505::4d5a900003::W32/Netsky.n@MM::eq1024::0020002e6c7061636b0000006000000010000000340000000400{14}400000c02e6c7061636b00000010000000700000000c0000003800{14}400000c02e6c7061636b00000090010000800000001c0000004400{14}400000c02e72737263000000001000000010020000020000006000{14}400000c02e6c7061636b0000003000000020020000220000006200{14}400000c000
20040428::HTMLVBS::W32/Bagle.aa@MM!hta::0::392c33382c3232312c31392c3233372c37312c3137392c36342c3233372c37312c3137392c36342c3233372c37312c3137392c36342c3233372c37312c313739
20040428::VBS::W32/Bagle.aa@MM!vbs::0::392c33382c3232312c31392c3233372c37312c3137392c36342c3233372c37312c3137392c36342c3233372c37312c3137392c36342c3233372c37312c313739
20040427::4d5a900003::W32/Netsky.x@MM::eq2048::4f549af6d9ef93a02aba535193e592b9c02ba3f41bd36d806991eaec1b3da32802120ac4a22b13237c82bfc70ca42ec1
20040426::4d5a500002::W32/Torvil@MM::eq2048::2043bb2a9911aa8033c6b7bd6a49b24dc9bdc0dc21e9008a4148c042101086e40d920421e886e487a49004568c622d52
20040422::4d5a900003::Exploit-DcomRpc.gen::eq2048::20032b3a991222802b3ef726e13606c24020911058ac145054580a0c05874820840dee409010202a23b62a221bda8b6410648b373f1b51b41ec2a0a2a2a2a222
20040402::4d5a900003::W32/Bagle.u@MM::eq8192::43.{3,4}42dc?0d.{4}48454c4c?4f.{3,4}5253[6cb0]540f4d07?41491f?4c2046[d75e]4f[8209]3a3c.{3}3043505420[c925]4f[5861]0f
20040318::4d5a900003::W32/Bagle.e@MM::eq6144 or eq3072 or eq6144::60e801000000e883c404e801000000e95d81edd9214000e8[0504]020000e8eb08eb02cd20ff24249a66be[3552][5347e1]e801000000
20040311::4d5a900003::Proxy-Cidra::eq22528::85ff8ad9735c04c76f2e636a647261ffcffe6fc547455420687474703a2f2f660420485454502f312e306ca49d10c82f
20040309::4d5a900003::W32/Netsky.j@MM::eq17408::60e8ed100000c3839887502c5804817cdbb6df3834302ca261f9ce6d0c1d1333040086c8eff0c3ef8fca08afdb93ccfa
20040229::4d5a900003::W32/Bagle@MM::eq6144 or eq11264 or eq13312::3135312e.{0,4}3230[3103]?2e?302e33
20040226::4d5a900003::W32/Mimail@MM::ge8192 and le20480::51.{1,3}54.{14,36}41.{1,7}52.{0,4}43.{3,7}4f3a.{2,6}4d41.{0,4}494c
20040130::4d5a500002::W32/Dumaru@MM::ge12288 and le28672::4d41.?494c204652.?4f.3a.3c.{17,26}524350.?5420.4f.{3,4}4441.{3,6}515549.{4,9}59
20040127::HTMLVBS::VBS/Inor::0::313644220a737a42696e617279203d20737a42696e61727920262022323036333631364536453646
20040119::4d5a900003::Downloader-GN::eq2048::00633a5c746dffbffcff702e65786500687474703a2f2f772e617175617269756d2d66697320ab6fff682e72752f707061022e62
20031222::4d5a900003::BackDoor-CAG::eq9216::6d6f76205b77f0b756b8002e706c57b776697275732e9f6b77bf4d6d5d202a2f37526567f8c2a0
20031115::4d5a500002::PWS-Mob.dr::eq53248::512f1d350d00200000007379737472617933322e657865141d51
20031010::4d5a900003::W32/Swen@MM::eq29696 or eq71680::3a2f2f7777322e66.{1,2}2e76.{64,93}454c45.{18,21}4f4b.{1,5}535441.{1,5}50415353
20030909::4d5a500002::W32/Pate.b::eq7168::fdffffff4d41494c2046524f4d3a203c61646d696e4064756d612e676f762e72753e0378dddf205243505420544f
20030902::4d5a900003::W32/Sobig.f@MM::eq29696::45f879002b6b234c796e612e28636ddb936fd6ed68a0
20030902::HTMLVBS::VBS/Haptime.gen@MM::0::52656d204920616d20736f727279212068617070792074696d650d0a4f6e204572726f7220526573756d65204e6578740d0a
20030728::4d5a900003::W32/Yaha.u@MM::eq37888::91d96f2d383835392db962b844144be807ebe9a71525742fad6d777723e135582a8f274d4b29a021fa4d494d452d493acacd5a5aa171aafe2f5a5818ee6d6978
20030701::4d5a500002::W32/Lovelorn@MM::eq70656::6c6f76656c6f726e407961686f6f2e636f6d
20030626::4d5a900003::W32/Sobig.e@MM::eq21504::b8c7648371fed25c06384afc14a39853d91ef9697f575279655840997b36d658063ed3ec24b4b94b35199a053a1a6f
20030620::BAT::BAT/Mumu.worm::0::636f70792053532e626174205c5c25315c61646d696e245c73797374656d3332202f790d0a7374617274202f69202f6d696e202f77616974202f4220707365786563205c5c2531202d75202532202d70202533202d6420636d642e657865202f63206e74736572766963652e626174
20030605::4d5a900003::W32/Bugbear.b@MM::eq1024::555058300000000000e00600001000000000000000040000000000000000000000000000800000e055505831000000000020010000f006000014010000040000000000000000000000000000400000e0555058320000000000100000001008000002000000180100000000000000000000000000400000c00000000000000000
20030602::4d5a900003::W32/Sobig.c@MM::eq50176::347b4d5450b476c211b76370bb70b3266f6f5d72c74b2d3829392d310b5155491086f087541945484c4f242b06e0c2f250617743643ac6fdf72815a7bb0b41555448207f039abd2e47494e27bd4c2046524f4de3b18a1958a3435054c45b3197
20030602::4d5a500002::W32/Ganda@MM::gt2048::044140000a41400010414000164140001c414000244140002a2e6c6e6b002a2e657865002a2e736372002a2e656d6c002a2e2a68746d2a002a2e646278003c736b72617474616861686140686f746d61696c2e636f6d3e
20030420::4d5a900003::BackDoor-ARG.dr::eq25600::952b668ad1bdf0e1488ad19771c5ff7bcae80a486f6f5db686e63ccfcdaee45831465416efc3c1edc4cd52c62ec6d01358
20030520::4d5a900003::W32/Palyh@MM::eq43008::7a494e470e3b4f4d6bbeddfeb24e115236303238082d204761626c65eb70343a50201f
20030516::4d5a900003::BackDoor-AQJ::eq66560::4e65744d656574696e672052656d6f7465204465736b746f702028525043292053686172696e6700736d74702e3136332e636f6d00000000
20030514::4d5a900003::W32/Fizzer.dll::eq2048::e89b03000085c07501c3a10c4800105333db3bc37517680014001068e09304005353ff1528200010a30c4800106a1c6820300010e8270400006a10684030
20030514::4d5a930001::W32/Fizzer.gen@MM::eq162816::db0f84b50000008b3b3bfe73ef52535657518b551883e902668b0431663904390f858c0000008bd9c1f90285c974118b06330783c60483c70485c075034975ef751603cb83e10385c9740d8a068a27464738e075034975f37558595f5e565703f903f183e90483c1048bc283e80478283bc8
20030514::4d5a900003::W32/Fizzer.gen@MM::eq10240::db0f84b50000008b3b3bfe73ef52535657518b551883e902668b0431663904390f858c0000008bd9c1f90285c974118b06330783c60483c70485c075034975ef751603cb83e10385c9740d8a068a27464738e075034975f37558595f5e565703f903f183e90483c1048bc283e80478283bc8
20030426::4d5a900003::W32/Lovgate.g@M::eq102400::9060e93d04000087c3a39f9f8a9f5acfd8e39fa27cca3c6fdee39f225c9be8e39f9f283c9be8e39fae2405a29f9f6624d2d8e39f9f9f9f9f2c24a3e9e39fef9e
20030423::4d5a900003::BackDoor-ARG::eq46080::50e8ce86000083c404c74644000000008bcee8f9f8ffff5ec3909090909090908b4424088b5424045052e831f9ffffc2
20030411::4d5a900003::W32/Oror.aa@MM::eq44032::bdff574f524b2d53455859330f545505a3de3b134b617a61d35e0730e1ef509f7662734b369401683a03
20030408::4d5a900003::W32/Gibe.b@MM::eq2048::436f646564202e2e2e6279204265676269652c20536c6f76616b6961
20030408::4d5a900003::W32/Gibe@MM::eq5120::71323136333039007132313633303900007132313633303900000000f4010000341c40
20030315::VBS::VBS/Fourcourse::0::5365742063\d3d4372656174654f626a6563742822264328\d\d2926224d53436f6d6d4c69622e4d53436f6d6d22264328\d\d2926222922264328\d\d29264328\d\d292622646320\d2c63\d22264328\d\d29264328\d\d292622
20030113::4d5a900003::W32/Sobig@MM::eq5120::719dcc1e2e77aa7a4d28d4a400cde3cde4038d1518b3d27b645132f127c17692ebe0d854260eda1357f33fde09495c0a
20030110::4d5a900003::W32/Lirva.gen@MM::eq2048::9d7e58d8632fb7.ce8c24e825.6c682336940b6e5152.{6,7}0c10e4bf..4168c9ff....39f2aef7d12bf98bf78bd98bfa100e8bcb4fc1e9......a5a1.d203cb83e10395f3a48b57....fcb4ab815266b4........152cce52......88505378c70d0403
20030104::4d5a900003::W32/Yaha.k::eq22528::686f746d61696c5f6861636b2e65786546667269656e64736869702e5f68ffef7363721f776f726c645f6f665f3111616bff61ffb865120e776565741742655f48617070
20021228::4d5a900003::W32/Merkur@MM::eq15360::570069006e00330032002e006d00650072006300750072007900200043006f00640065006400200062007900200049006e0064007500730074007200790020004000200041004e0056005800670072006f00750070
20021112::4d5a900003::W32/Braid@MM::eq12288::427269646500427269646500004272696465
20020902::4d5a900003::W32/Bugbear@MM::eq41984::40032e333b7e6fad926f4154414432358743507d847607474f3a3c277d4d41494cc24be668e8a311270d8bd24dfa48454c4f120f32b52b106f612b1775bbc303
20020928::7f454c46::Linux/Slapper.worm::gt1024::726d202d7266202f746d702f2e627567747261712e633b636174203e202f746d702f2e757562756774726171203c3c205f5f656f665f5f3b0a005f5f656f665f
20020928::4d5a900003::W32/Sachiel.worm::eq41984::4d0061006300680069006e0065006400720061006d006f006e006400610072006b0040006c006100740069006e006d00610069006c002e0063006f006d00
20020912::4d5a500002::W32/Blinkom::eq154624::52615a132f4745445a4143af0c2da5fb3735372031203431340f3cb3f1ffa62f548d434f4c4f4d424941315d
20020912::7f454c46::Linux.Osf.8759::gt1024::3733353031383637202d207838362f6c696e7578206d6f645f7068702076342e302e327263312d76342e302e352072656d6f7465206578706c6f69740a6279206c6f7269616e2e0a
20020912::4d5a900003::W32/ProLin@MM::eq10240::3a005c00760069007200750073005c007600690072005c0063007500720072005c00500072006f006a0065006300740031002e00760062
20020912::d0cf11e0a1b11ae1::W97M/Thus.gen::0::2844806179284e6f7729513190312920413064284d108b126855013329da474d736708426f7850946170707900204269727468646136796360
20020830::4d5a900003::BackDoor-AJH::eq18432::4d61646520627920417869616c69732041582d49636f6e20\d2e\d
20020830::4d5a500002::W32/Stopin.b@MM::eq24576::484f5720544f2053035007bdf66f8df68b494f4c454e43456227a325ecd6697003425249808ca5b75c5847332d3c05d86cd8f65241454c
20020830::4d5a500002::W32/Cecile.dr::eq20480::436563696c6520636f6465642062792053302f42305b696b785d2c206d61646520696e20617373656d626c790068
20020830::4d5a500002::W32/Bika.gen::0::57696e33322e[^20]+20627920426c61636b204a61636b00
20020830::VBS::VBS/Hatred.gen::0::42532e5355504552464c554f55532076\d2e\d20627920476f626c65656e2057617272696f722f2f534d46
20020830::4d5a500002::W32/EnerKaz.worm.a::eq335872::28632920627920456e65726779204765726d616e7920535354404861626c61732e636f6d
20020830::d0cf11e0a1b11ae1::W32/Hokilo.worm::eq7168::4952432d576f726d2e486f6b6f206279204b756173616e61677569
20020722::4d5a500002::W32/Sentral.dr::gt1024::5b53616e617472616c2e\d\d\d\d20627920546865726d6f4269742f496b582c79324b5d
20020722::4d534654::VBS/Funtime::eq1281::2553797374656d526f6f74255c53797374656d33325c66756e74696d65\d\d2e687461
20020722::JS::JS/Germinal::0::4a532e4765726d696e616c2050617220506574694b20\d\d2f\d\d2f\d\d\d\d
20020722::4d5a500002::W32/Idele::gt1024::502d616469632076697275732076657273696f6e20\d2e\d446f78746f72
20020722::4d5a500002::W32/Chiton.ab.dr::gt1024::[^00]000000\w{2,6}202d20726f79206720626976
20020722::4d5a900003::W32/Yaha.gen@MM::ge19456 and le20480::3a2d290021072104[^5a]*5a4f4e45414c41524d.....415650..4c*4f434b444f574e3230
20020722::4d5a::W32/Plex@MM::eq1024::504500004c01.00....00000000.000000e000..0b01..00..0000.000000000000...000010000000..000000..0010000000.0000.000000.000000.00.00706c7872
20020715::4d5a900003::W32/Frethem.fl@MM::ge30720 and le43008::7372633d33[^44]*446369643a57386471777138[^71]*7139314f3133
20020715::4d5a500002::W32/Duni.worm.b::eq205824::7a65726f2e6578657f0732f29706446c44697230184bb58558f8617a61615c27673143563ad777840317f163706c6f5c6b270b7a100f76310aeea21977092e2160864dc15f2f1710082c7b01a22e686f740f866f9c77323e466f6cc096220763360c496f73b4f55f4a27736b794c6162
20020708::d0cf11e0a1b11ae1::W97M/VMPCK.dd::0::43415075742120206279202d2d3d7c7c204e7c6330747c4e207c7c3d2d2d2028632920(286329)?\d\d\d\d
20020708::7f454c46::BSD/Scalper.worm::eq44032::2f7573722f62696e2f75756465636f6465202d70202f746d702f2e757561203e202f746d702f2e613b6b696c6c616c6c202d39202e613b63686d6f64202b78202f746d702f2e613b6b696c6c616c6c202d39202e613b2f746d702f2e612025733b657869743b
20020708::4d5a500002::W32/SirCam@MM::eq106496::558becb9410000006a006a004975f951535657b8d4a84100e8bfb0feffbe10ef410033c05568ddb4410064ff3064892033c055688eb4410064ff306489206a20e8d3b1feff50e8fdb2feff6affe8d6b1feff50e8f8b2feffe8ebfdffff8d4df033d2b8f4b44100e89cb5ffff8b55f0b8fcee4100e8
20020708::HTMLJS::JS/Kak@M::0::4b61676f752d416e74692d4b726f246f66742073617973206e6f7420746f646179
20020708::d0cf11e0a1b11ae1::W97M/Gorum::0::47756f726d28566273292e204d6972632f4f75746c6f6f6b2f5662732e20427920424d2026204f572026204b616c616d6172006c0242406e
20020708::4d5a500002::W32/Gorum.gen@MM::eq3072::427261696e4d7573636c65202b204f6c6457617279202b204b414c414d41520047756f726d
20020625::4d5a900003::W32/Perrun::eq8192::6a7067766972
20020625::49545346::VBS/Chick.e@M::eq5120::4848412056657273696f6e20342e37342e38373032000400240009040000000000000000000001000000000000008077b08682fec101000000000000000002001200ef6cf876ea596ffc6cc47572e22e68746d0006000b00696c6f76656c61757261000500040077696e0007000400517e950f0c000400000000000d0000105423534dda893d
20020625::4d5a900003::W32/Higuy@MM::eq1024::50010000100000c981000000060000000000000000000000000000600000e02e4672616c69270073030000006001000004000000020000000000000000000000000000600000e20000
20020617::d0cf11e0a1b11ae1::X97M/Generic::0::5839374d2e4e6974726f67656e
20020617::4d5a500002::W32/Trilisa.gen@MM::ge78848 and le135168::00686f73742e65786500686f73742e736372
20020603::49545346::VBS/Chick.bc@M::eq5120::16004848412056657273696f6e20342e37332e383139380004002400090400+0100+[^00]+c10100+02001100746f706963732f696e6465782e68746d000300.00\w+2048656c70000600.00\w+00050003005450000c000400000000000d000010542353
20020603::4d5a900003::W32/Navidad.gen@M::eq31744::4e006100760069006400610064002000560065007200730069006f006e002000\d+.+43006f00700079007200690067006800740020002800430029002000\d00\d00\d00\d00
20020603::4d5a500002::W32/Ska@M::eq7168::626567696e2036343420486170707939392e657865.+656e64.+536b61
20020527::4d5a900003::W32/GOP@MM::eq35840::736d74702e796561682e6e65.+2d20474554204f494351
20020527::BAT::JS/SQL.Spida.worm.b::0::[205c]73657276696365732e657865.+[205c].+73716c657865632e6a73.+[205c]636c656d61696c2e657865.+[205c]73716c70726f636573732e6a73.+[205c]73716c696e7374616c6c2e626174.+[205c]73716c6469722e6a73.+72756e2e6a73.+[205c]74696d65722e646c6c.+[205c]73616d64756d702e646c6c.+[205c]707764756d70322e657865
20020527::4d5a500002::W32/Benjamin.worm::eq129024::000000009060e93d040000db95ad0c335aa9b70388ed0c306c8291e38eed0cb00c554577b1a985ae4de04833be2c6a30b1a9cbb682904833b1a90c333c2c0879f5a95ccc
20020520::4d5a900003::W32/Choke.c.worm::eq11264::4900200063006f006d006500200069006e002000700069006500630065002e002000200020004d00790020006e0061006d00650020006900730020004a0065007200720079
20020520::49545346::VBS/Chick.d@M::eq5120::4848412056657273696f6e20\d2e\d\d2e\d\d\d\d.+564220427269746e657920642e68746d6c.+6f636f736f6674
20020520::49545346::VBS/Chick.a@M::eq5120::4848412056657273696f6e20\d2e\d\d2e\d\d\d\d.+427269746e65792e68746d6c.+427269746e65792d506963.+627269746e65792d70696373
20020514::4d5a900003::W32/Zhangpo@MM::eq267264::7a68616e67706f00582d4d61696c6572
20020514::4d5a500002::W32/Haiku@MM::eq2048::4861696b752047656e657261746f72
20020514::VBS::IRC/Theme.worm.dr::0::4952432d576f726d2e\w+20+5468656d6520576f726d20+4279
20020504::4d5a::W32/GriYo.29A.by::0::436f64656420627920477269596f.+323941
#20020427::4d5a::W95/Elkern.cav.c::gt1024::57716b.+3d757365725875.+5c6578706c6f726572
20020427::4d5a900003::W32/MyLife.j@MM::eq2048::ff010600534841524f4e001993420022
20020427::d0cf11e0a1b11ae1::WM/Cap::0::434150.+4175746f45786563.+4175746f4f70656e.+46696c654f70656e.+46696c6553617665.+4175746f436c6f7365.+46696c65536176654173.+546f6f6c734d6163726f
20020422::7f454c46::Linux/Manpage::eq4096::2f746d702f76697275732e63002f746d702f76696374756d
20020422::d0cf11e0a1b11ae1::X97M/Oblivion::0::6b696c6c6572006b0069006c006c00650072
20020419::4d5a500002::W32/Orez::eq3072::5669727573202d204f72655a52617453205b496b785d2028432920\d\d\d\d
20020419::4d5a900003::W32/Hybrys.gen@MM::eq1024::2e7465787400000000.000000100000..000000020000000000000000000000000000200000e02e726461746100000010000000.00005a00000000.0000000000000000000000000000400000c0
20020419::4d5a900003::W32/BadTrans@MM::gt8192 and le20480::44*6563.+4e*6f76.+4f*6374.+53*6570.+41*7567.+4a*756c.+4d*6179.+46656213615361274672690054687500.9d5bfe576564005475656f172f.+3275
20020419::4d5a900003::W32/Nimda.gen@MM::eq37888::5c496e7465726661636573000000436f6e636570742056697275732843562920562e\d2c20436f70797269676874284329\d\d\d\d.{10,}4d494d452d56657273696f6e3a20312e30
20020419::4d5a900003::W32/Choke.gen.worm::eq10240::430068006f006b00650020002c00200043006f0070007900720069006700680074002000ae00200031003800380036
20020417::4d5a500002::W32/Cervivec@MM::eq159744::56746970.+5769747a.+626c6167.+4a6f6b65.+5a617274
20020417::4d5a900003::W32/MyLife.e@MM::eq3072::7a6172793230+.+40656d61696c2e636f6d
20020417::4d5a900003::W32/Shoho.gen@MM::eq22528::570049004e004c003000470030004e002e004500580045
20020417::4d5a500002::W32/Yarner.gen@MM::eq366592::54726f6a616e65722d496e666f
20020417::4d5a500002::W32/Kitro@MM::gt184320::4b494c54524f202a204d534e5748
20020417::4d5a500002::W32/Warga@MM::gt30720 and lt32768::77617267616d65732e657865
20020417::4d5a500002::W32/Fbound.c@MM::le2048::492d576f726d2e4a6170616e697a65
20020417::4d5a900003::IRC/Girls.worm::0::4769726c73005a6970576f726d00007a6970576f726d
20020417::4d5a900003::W32/Gokar@MM::eq14336::47006f0062006f00.+7400650061006d00760069007200750073.+4b006100720065006e
20020417::4d5a900003::W32/Goner@MM::le4096::70656e7461676f6e65
20020417::4d5a900003::W32/Myparty.b@MM::eq21504::537ff3ffff756e4d6f6e5475655765645468754672695361744a616e4665624dffb776fb617241707205794a26026c4175675365704f63745b81fafd4e6f764465633f545a1b1c747bb7a9ff696d
20020417::4d5a000002::W32/Aliz@MM::eq1024::69776f726d2e61786c387a65
20020417::4d5a420002::W32/Gift.b@MM::0::54686973206973206120492d576f726d20636f6465642062792042756d626c656265655c\d+.210a0a47726574696e677a20746f20616c6c20\d+.206d656d62657273203b29
20020417::4d5a420002::W32/Plage.gen@M::0::5468697320697320506c61676520\d{4}20636f6465642062792042756d626c656265652f\d+.2e00506c61676520\d{4}2041637469766174696f6e
20020404::4d5a::W32/Magistr.b@MM::eq1024::00{2}..00{13}[^00]0000.2e.{5}0000ed[^00](00|01)0000..0000.(00|01)0000..00{13}.0000[^00][^2e]
20020413::d0cf11e0a1b11ae1::W97M/Nitrogen.intd::0::5739372e4e6974726f67656e
20020413::VBS::VBS/Madonna::0::4d61646f6e6e61.+4a6164726171756572204b696c6c6572
20020413::4d5a::W32/Ratter.by::0::5b57696e[^5d]+5d206279205261747465722f\d+
20020404::d0cf11e0a1b11ae1::IRC/Stages.worm::0::54686520((6d616c65)|(66656d616c65))20737461676573206f66206c696665
20020404::4d5a::W32/HLL.ow.24590::ge7168 and lt8192::4a544d202d2066726f6d20655b61785d20746f20486f6d6572205468612050696c65
20020403::4d5a::W32/GMetaphase.by@MM::0::5b57696e33322e[^5d]+5d20.+2047696761627974652f4d6574617068617365
20020403::4d5a::W32/Donut.dr::gt1024::4e45542e646f744e45542062792042656e6e792f323941
20020403::d0cf11e0a1b11ae1::W97M/Melissa.a@MM::0::574f52442f4d656c69737361207772697474656e206279204b77796a69626f
20020402::4d5a::W32/Giri.dr::gt1024::57696e33322e47697269676174206973206e6f772061637469766521
20020402::4d5a::W32/Blakan::0::57696e[3233353839]{2}2e\w+2e*\w*20627920\w+.+67656e657261*74696f6e20766972757320
#20020402::4d5a::W95/Rekoj.GR::gt1024::4a6f6b6572\d+
20020402::d0cf11e0a1b11ae1::W97/Thus.gen::0::546875735f\d\d\d
#20020327::4d5a::W32/Borges.cmp::0::57494e33322e424f5247455320564952555320\d+2e\d+20627920496e74\d+682f494b58004d61646520696e2050617261677561792c20536f75746820416d6572696361
20020323::d0cf11e0a1b11ae1::W97/Marker.gen::0::3c2d207468697320697320[\w ]+206d61726b657221
20020323::d0cf11e0a1b11ae1::W97/VMPCK1.gen::0::564d50434b2076\d+2e\d+\w*205b[^5d]+5d
20020322::4d5a::W32/Pilsen.cmp.4096::0::57494e33322e50494c53454e20564952555320627920496e743133682f494b58004d61446520694e205061526147754179
20020322::4d5a::W32/PetTick@MM::le4096::492d576f726d2e467269656e647300436f64656420627920506574694b2028632932303031.+546f206d7920667269656e6473204d61796120616e64204c617572656e74
#20020322::4d5a::W95/Miam.dr::gt2048::57696e33322e4e656f205669727573206279205b5469506961582f5644535d004d69616d20212049206c6f76652050452066696c6573203b29
20020320::4d5a::W32/FunLove.4099::gt2048::7e46756e204c6f76696e67204372696d696e616c7e
20020319::MIXVBS::VBS/LoveLetter@MM::0::73756220737072656164746f656d61696c2829.+64696d20782c612c6374726c697374732c637472656e74726965732c6d616c6561642c622c726567656469742c726567762c7265676164.+726567763d726567656469742e526567526561642822484b45595f43555252454e545f555345525c536f6674776172655c4d6963726f736f66745c5741425c22266129
20020316::4d5a::W32/Alcop.gen@MM::le6144::776f726d4977696e67.+57696e33322e20496d656c646120746865205642205669727573
20020316::4d5a::W32/Sintesys@MM::gt102400 and le160000::492d576f726d2e53757065724e6f7661
#20020311::4d5a::W32/Enviar.gen@M::0::76656e636520656d20.+7465737465406965672e636f6d2e6272.+696d6572
20020311::4d5a::HLLP.Yap.8421::0::59617021205768617420636f756c642069742042203fa8204974277320592e412e502e202859657420416e6f7468657220506172617369746529
20020309::VBS::VBS/Kristen.A@MM::0::46756e6374696f6e.+466f722049203d203120546f204c656e28[^29]+2920537465702032.+486176652066756e2077697468204b72697374656e
20020309::4d5a::W32/Joss.919::0::5b57696e326b2e4a6f73735d206279205261747465722f\d\d41
20020309::4d5a::W32/Heidi@MM::0::76697275736573.+6578706c6f6974.+706174636820686173206265656e20737570706c6965642077697468207468697320656d61696c20616e642077696c6c206669782074686520736563757269747920686f6c65.+70617463682e657865
20020309::4d5a::W32/Awfull::0::5b57696e33322e4f72616e67652062792045626f6c615d0044656469636174656420746f20746865204e59464420616e64204e5950442e
#20020309::4d5a::W32/Javel.512::0::4b52454154495649545920464f52204b415453
20020305::4d5a::MultiDropper-BN::0::687474703a2f2f7777702e6963712e636f6d2f736372697074732f5757504d73672e646c6c3f66726f6d3d\w+2666726f6d656d61696c3d\w+40\w+2e\w+267375626a6563743d50726f6772616d2b657865637574696f6e26626f64793d5468652b706572736f6e2b746861742b73656e742b746869732b70616765722c2b69732b776974682b612b66696c652b67656e6572617465642b62792b4a756e7461646f7226746f3d\d{6,}2673656e643d.+
#20020305::e9::ARCV.Anna.742::0::5b414e4e415d00536c6172746962617274666173742c2041524356204e754b4520746865204672656e6368.+286329204152635620\d\d\d\d202d20456e676c616e64205261696e696e6720416761696e
20020304::VBS::VBS/SST@MM::0::43687228[^29]+29.+4e657874.+456e64.+46756e6374696f6e.+566273776720\d+2e\d+2e?205b4b5d416c616d6172
20020304::VBS::VBS/Eraser.A::0::457261736546696c6573.+46756e6374696f6e.+46696c65546f4572617365.+46696c65546f45726173652e70617468.+457874656e73696f6e.+545854.+444f43
20020304::BAT::BAT/Double_At.B::0::6563686f202e42415420766972757320274040272076\d+2e\d+.+4f522043582c4358.+4a5a20313042.+4d4f562044582c313043.+4d4f562041482c3431.+494e54203231.+494e542033.+4442.+66696e64.+6465627567.+6578697374.+636f7079.+66696e64.+646f2063616c6c.+64656c
20020304::VBS::VBS/Concon.gen::0::5753485368656c6c.+575363726970742e5368656c6c.+484b45595f4c4f43414c5f4d414348494e45.+65786566696c65.+5c636f6e5c636f6e.+57656c636f6d65.+696e74446f4974.+766243616e63656c.+575363726970742e51756974
20020304::VBS::VBS/CoolNote.worm::0::5072696e7a20436861726c65732041726520446965.+546865206e6577657374204d65737361676520666f7220436f6f6c2055736572.+766263726c66.+4c75636b7932303030.+434f4f4c5f4e4f54455041445f44454d4f2e545854.766273
20020304::VBS::W32/CodeBlue.worm::0::576562536572766963652c764c6973742c6974656d2c76466f756e642c7653756244616e2c44616e6765722c764e6577436f756e742c466f756e64537472696e67.+46756e6374696f6e2046696e644d6170706572.+466f756e64.+53747231.+436872.+44656c4d6170706572.+44616e676572.+4172726179.+5363726970744d617073
20020302::4d5a::Win32.Asorl::0::57696e33322f417374726f4769726c20417374726f436f64656420627920612057617a657800596f75722073797374656d20697320696e6665637465642062792057696e33322f417374726f4769726c2076\d+2e\d+.+44656469636174656420746f20416e69746120616e64206f75722070656e672d6775696e203b290d
20020207::d0cf11e0a1b11ae1::W97M/Generic::0::57.*4d2e537069726f68657461
20020207::4d5a::W32/Adebar.dr::0::5b694b785d20286329203139393920616c6c207269676874207265736572766564202d2070726573656e7420416c6465426172616e
#20020227::4d5a::W32/HLLP.32767.a::0::57696e33322e484c4c502e5a617573686b612e576f726d005a617573686b6100
20020225::4d5a::W32/XTC@MM::0::2e415658656e6372
#20020223::4d5a::W95/Puma::0::eb5a46696e64466972737446696c65410046696e644e65787446696c65410043726561746546696c6541005f6c636c6f73650053657446696c65506f696e746572005265616446696c6500577269746546696c65000b2a2e45584500
20020223::d0cf11e0a1b11ae1::W97M/Hope.gen::0::576f7264323030302e476172476c65
#20020221::e9::Ginger.mp::0::596f752063616e2774206361746368207468652047696e6765726272656164204d616e212195
20020220::474554::W32/CodeRed.c.worm::0::.+436f64655265644949.+
20020220::474554::W32/CodeRed.a.worm::0::484f53543a7777772e776f726d2e636f6d0a204163636570743a202a2f2a0a436f6e74656e742d6c656e6774683a
20020216::4d5a::W32/Klez.gen@MM::0::0d0a2e0d0a00000044415441200d0a0048454c4f2025730d0a0000003e0d0a004d41494c2046524f4d3a203c000000005243505420544f3a3c00000025640000
20020214::4d5a::W32/MTX.gen@M::0::536f6674776172652070726f76696465206279205b4d41545269585d205658207465616d
20011220::4d5a::BackDoor.arsd::0::14ff56b936dc5abd1b93ebea5f21b835731bfca6dc6f01248b1485b86c280d3bd1740940b3bb954a1a741572e51a890c8b00cfb7904924fe81c3228da5687ab4
20011218::4d5a::W32/Navidad.e@M::0::08b56dea4682326762422b165997cbdb401c02d24340a0996520992a9da121a1a11d550519015755328c41c50801760a430f8187b0da183d422828a880acd2e9
20020304::TEST::EICAR-Test-File::0::58354f2150254041505b345c505a58353428505e2937434329377d2445494341522d5354414e444152442d414e544956495255532d544553542d46494c452124482b482a