New Malware v13

[Matt]

I've collected detection rules for the following Malware:

• Adware.Mirar
• Adware.MyWebSearch
• Adware.WebDir
• Adware.Webprefix
• Hijacker.Unknown
• Malware.Smitfraud
• Malware.Unknown
• Malware.Zbot
• Rogue.FakeXPA
• Rouge.SysAntivirus2009
• Rogue.SystemAntivirus2008
• Rogue.Unknown
• Rogue.WinDefender2008
• Rogue.WiniBlueSoft
• Rogue.XP Antivirus
• Spyware.AdRotator
• Trojan.Agent
• Trojan.Backdoor.Unknown
• Trojan.BHO
• Trojan.Downloader
• Trojan.Ertfor
• Trojan.FakeAlert
• Trojan.Unknown
• Trojan.Virtumonde
• Virus.Virut
• Worm.Koobface
• Worm/Trojan.VBS
• Worm.SDBOT

I hope that these rules are helpful. Spybot rocks.

 

[Buster]

I guess this path won't work "C:\<$PROGRAMFILES". Just remove "c:\" in order to use the path template. Otherwise the path would like this "c:\c:\program files\"

 

[Matt]

I guess this path won't work "C:\<$PROGRAMFILES". Just remove "c:\" in order to use the path template. Otherwise the path would like this "c:\c:\program files\"

Thank you for your feedback. It seems that I've made a small mistake there. I'll try to avoid such things in future files. :bigthumb: