Version history for McAfee Stinger (64-bit)
<<Back to software description
Changes for v12.1.0.3396 - v12.1.0.3411
- New Detections:
- PDF/Exploit.c
- Ransom-Generic
- Ransom-Robin.y
- Enhanced Detections:
- Generic Exploit.a
- Generic Trojan.ju
- Generic Trojan.kf
- Generic Trojan.kj
- PS/LemonDuck
- Trojan-AitInject.bk
Changes for v12.1.0.3394 - v12.1.0.3396
- New Detections:
- AUTOIT/Agent.c
- AUTOIT/Agent.d
- AUTOIT/Agent.e
- Autoit.gen.b
- BackDoor-Bladabindi
- Exploit-CVE2016-0189.d
- Exploit-CVE2018-8174.e
- Exploit-CVE2019-19781
- Generic Packed.cp
- Generic Trojan.KT
- Generic Trojan.kr
- Generic Trojan.ks
- Python/PWS.e
- Ransom-Ako.a
- Ransom/Horsedeal
- Trojan-AitInject.bi
- Trojan-AutoIt.e
- Trojan-AutoIt.f
- Trojan-Scaler
- VBS/Cleanup
- Enhanced Detections:
- AUTOIT/Injector.aq
- DistTrack
- Exploit-CVE-2017-11882
- Generic Packed.iso
- Generic trojan.kh
- PWS-AHK.c
- PWS-AutoIt.d
- Python/PWS.d
- Ransom-Ryuk
- Trojan-AitInject.aq
- Trojan-AitInject.bg
- Trojan-AitMiner.h
- Trojan-AutoIT.a
- Trojan-AutoIt.d
- Trojan-Injector.b
- Trojan-PWS.c
- Trojan-Ransom.b
- Trojan-Spy.s
- Trojan-Wiper
- Trojan-aitinject.bh
Changes for v12.1.0.3382 - v12.1.0.3394
- New Detections:
- AUTOIT/Agent.c
- AUTOIT/Agent.d
- AUTOIT/Agent.e
- Autoit.gen.b
- BackDoor-Bladabindi
- Exploit-CVE2016-0189.d
- Exploit-CVE2018-8174.e
- Exploit-CVE2019-19781
- Generic Packed.cp
- Generic Trojan.KT
- Generic Trojan.kr
- Generic Trojan.ks
- Python/PWS.e
- Ransom-Ako.a
- Ransom/Horsedeal
- Trojan-AitInject.bi
- Trojan-AutoIt.e
- Trojan-AutoIt.f
- Trojan-Scaler
- VBS/Cleanup
- Enhanced Detections:
- AUTOIT/Injector.aq
- DistTrack
- Exploit-CVE-2017-11882
- Generic Packed.iso
- Generic trojan.kh
- PWS-AHK.c
- PWS-AutoIt.d
- Python/PWS.d
- Ransom-Ryuk
- Trojan-AitInject.aq
- Trojan-AitInject.bg
- Trojan-AitMiner.h
- Trojan-AutoIT.a
- Trojan-AutoIt.d
- Trojan-Injector.b
- Trojan-PWS.c
- Trojan-Ransom.b
- Trojan-Spy.s
- Trojan-Wiper
- Trojan-aitinject.bh
Changes for v12.1.0.3278 - v12.1.0.3280
- New Detections:
- LemonDuck!mem
- Enhanced Detections:
- Generic Trojan.w
- Trojan-AitInject.as
- ZeroAccess!cfg
Changes for v12.1.0.3272 - v12.1.0.3278
- New Detections:
- Exploit-CVE2019-0708
- Exploit-GAB
- Sodinokibi
- Trojan-Trickbot.a
- VegaLocker
- Enhanced Detections:
- GenDownloader.gm
- Generic Trojan.i
- Trojan-AitInject.aq
- Trojan-AitMiner.d
- Trojan-AitMiner.e
- Trojan-AitMiner.f
- Trojan-AitMiner.g
- Trojan-CoinMiner
- Trojan-Spy.s
- ZeroAccess!cfg
Changes for v12.1.0.3198 - v12.1.0.3215
- New Detections:
- Trojan-AitInject.av
- Enhanced Detections:
- Trojan-Exploit.rtf
- Trojan-Packed.RAR
- Trojan-PoweLike.c!reg
Changes for v12.1.0.3132 - v12.1.0.3160
- New Detections:
- Trojan-FQXA
- Enhanced Detections:
- Exploit-CVE2017-11882
- Generic Trojan.j
- Ransom-Cortex
- Trojan-Packed.RAR
Changes for v12.1.0.3115 - v12.1.0.3116
- New Detections:
- Exploit-CVE2008-4250
- Enhanced Detections:
- Exploit-CVE2017-8570
Changes for v12.1.0.3098 - v12.1.0.3115
- New Detections:
- Ransom-GCrab
- Trojan-StartPage
- Enhanced Detections:
- AutoIt/Injector.i
- CVE2017-11882
- Generic Trojan.i
- Trojan-PWS
Changes for v12.1.0.3094 - v12.1.0.3098
- Enhanced Detections:
- Trojan-PWS
Changes for v12.1.0.3074 - v12.1.0.3094
- New Detections:
- CVE2018-20250
- Trojan-Exploit.rtf
- Enhanced Detections:
- Generic Trojan.j
- JS/Kryptik.gen.a
- Trojan-Agent
- Trojan-AitInject.ak
- Trojan-AitInject.am
- Trojan-Emotet
Changes for v12.1.0.3051 - v12.1.0.3054
- New Detections:
- PDF/Exploit.a
- Trojan-Separ
- Enhanced Detections:
- Exploit-CVE-2010-2883
- Trojan-Separ
Changes for v12.1.0.3030 - v12.1.0.3037
- New Detections:
- AUTOIT/Injector.t
- Trojan-PShell.spy
- Enhanced Detections:
- ANDROID/Spy.a
- Exploit-CVE2012-0158!rtf
- Exploit-CVE2017-11882
- Generic Trojan.J
- PDF/Phishing.gen.b
- Trojan-AitInject.ak
- Trojan-CoinMiner
- W32/Shellcode.a
Changes for v12.1.0.3028 - v12.1.0.3030
- New Detections:
- Exploit-CVE2016-7262
- Trojan-RottenPt
- Enhanced Detections:
- 1
- Generic Trojan.i
- Ransom-Matrix
- Trojan-Backdoor
- Trojan-Emotet
- Trojan-MereTam
- Trojan-PWS
- Trojan-Ransom
- Trojan-aitinject.ah
Changes for v12.1.0.3007 - v12.1.0.3016
- New Detections:
- Ransom-Anatova
- Enhanced Detections:
- Exploit-CVE2017-8759.m
- Exploit-RTF
- Generic Trojan.i
Changes for v12.1.0.3003 - v12.1.0.3004
- Enhanced Detections:
- Trojan-AitInject.ad
Changes for v12.1.0.2974 - v12.1.0.2985
- New Detections:
- 7zipSFX
- AT4RE Protector
- Adware-AddLyrics
- Adware-BProtect
- Adware-BSurf
- Adware-BetterInstaller
- Adware-BetterSurf
- Adware-Bprotect
- Adware-Bprotect.a
- Adware-Bprotect.b
- Adware-Bprotect.c
- Adware-DomaIQ
- Adware-Eorezo
- Adware-Hebogo
- Adware-Iffinity
- Adware-InstallQ
- Adware-MegaSearch
- Adware-MixiDJToolbar
- Adware-Monetizer
- Adware-NewNext
- Adware-OutBrowse
- Adware-PowerOffer
- Adware-SaveShare
- Adware-SweetIM
- Adware-iBryte
- AlexProtect
- AntiDote
- AstrumSFX
- AutoHotKey
- AutoIT
- AutoIT 2.6.4
- AutoIT 3.0.x.x - 3.1.x.x
- AutoIT 3.2.0.x - 3.2.5.x
- AutoIT 3.2.6.x+
- Bat To Exe Converter
- Bat/Mumu.worm
- Bojan
- BrainInstall
- Crossrider
- DMG
- DirectDownminer
- DistTrack!sys
- Distromatic
- DomaIQ
- Downloader-BPJ.gen.a
- Downloader-FKW
- Downloader-FMA
- Downloader-FMB
- Downloader-FMJ
- DriverPack
- EXECrypter
- EXECryptor
- Efca
- Encoded Executable
- Enigma
- Excalibur
- Exploit-DcomRpc
- Exploit-DcomRpc.b
- Exploit-DcomRpc.dll
- Exploit-IFrame.gen.ah
- Exploit-IFrame.gen.ak
- Exploit-IFrame.gen.am
- Exploit-Lsass
- Exploit-Lsass.dll
- Exploit-MS04-011
- Exploit-MS04-011.gen
- Exploit-SWF!Blacole.dx
- Exploit-XMLhttp.d
- Exploit-XMLhttp.d.gen
- Exploit-XMLhttp.d.gen.b
- Exploit-XMLhttpd.d
- Exploit-XMLhttpd.gen.c
- FakeAlert.dx
- FishPE.a
- FreeKey
- GameEnix
- GameVance.gen.be
- GameVance.gen.bf
- Generic Malware.af!ats
- Generic Malware.ce!pec
- Generic Malware.ev!pec
- Generic.Dropped.a
- Generic.Miuref.dx
- Generic.Upatre.dx
- Generic.dam
- Generic.gl
- Generic.it
- Generic.iu
- Generic.iw
- Generic.jb
- Generic.jg
- Generic.jk
- Generic.jl
- Generic.jp
- Generic.jq
- Generic.jv
- Generic.jw
- Generic.jx
- Generic.jy
- Generic.kg
- Generic.kh
- Generic.kk
- Generic.ko
- Generic.kp
- Generic.kq
- Generic.kr
- Generic.ks
- Generic.ku
- Generic.la
- Generic.le
- Generic.lp
- Generic.lq
- Generic.lr
- Generic.lt
- Generic.lu
- Generic.lv
- Generic.lw
- Generic.lx
- Generic.ma
- Generic.mf
- Generic.mg
- Generic.mh
- Generic.mi
- Generic.mj
- Generic.mk
- Generic.ml
- Generic.mm
- Generic.mn
- Generic.mt
- Generic.mu
- Generic.mv
- Generic.mw
- Generic.mx
- Generic.my
- Generic.nd
- Generic.ne
- Generic.nf
- Generic.ni
- Generic.nj
- Generic.nn
- Generic.no
- Generic.np
- Generic.nq
- Generic.nr
- Generic.nv
- Generic.nw
- Generic.nx
- Generic.ny
- Generic.nz
- Generic.og
- Generic.oh
- Generic.om
- Generic.on
- Generic.oo
- Generic.op
- Generic.oq
- Generic.ou
- Generic.ov
- Generic.ow
- Generic.ox
- Generic.pa
- Generic.pb
- Generic.pk
- Generic.pl
- Generic.pm
- Generic.pt
- Generic.pu
- Generic.px
- Generic.py
- Generic.pz
- Generic.qc
- Generic.qd
- Generic.qe
- Generic.qi
- Generic.qj
- Generic.qk
- Generic.ql
- Generic.qm
- Generic.qn
- Generic.qo
- Generic.qp
- Generic.qq
- Generic.qr
- Generic.qu
- Generic.qv
- Generic.qw
- Generic.qy
- Generic.qz
- Generic.ra
- Generic.rb
- Generic.rc
- Generic.rd
- Generic.re
- Generic.rf
- Generic.rj
- Generic.rk
- Generic.rl
- Generic.rm
- Generic.ro
- Generic.rt
- Generic.sb
- Generic.sc
- Generic.sd
- Generic.sg
- Generic.si
- Generic.sj
- Generic.sn
- Generic.so
- Generic.sp
- Generic.sq
- Generic.sr
- Generic.ss
- Generic.st
- Generic.su
- Generic.sv
- Generic.sw
- Generic.tb
- Generic.tc
- Generic.td
- Generic.te
- Generic.tf
- Generic.tl
- Generic.to
- Generic.tp
- Generic.tq
- Generic.tr
- Generic.ts
- Generic.tt
- Generic.tu
- Generic.tv
- Generic.tz
- Generic.ua
- Generic.ub
- Generic.ud
- Generic.ue
- Generic.uf
- Generic.ug
- Generic.ui
- Generic.uj
- Generic.uk
- Generic.um
- Generic.un
- Generic.uo
- Generic.uq
- Generic.ur
- Generic.ut
- Generic.vg
- Generic.vm
- Generic.vn
- Generic.vt
- Generic.vu
- GenteeInstaller
- GnuCompiler
- GoToAssist
- HTool-JSP/WebShell
- HTool-JSPRat
- HTool-RemoteCmd
- HackPack.a
- HackTool-ZBotBuilder
- HideWindow
- HideWindow.dll
- InnoSFX
- InstallCore
- InstallMonster
- InstallShieldSFX
- Installrex.dr
- Ividi
- Iwin
- JS/Blacole.dx
- JS/Downloader-AUE
- JS/Downloader-FCV
- JS/IFrame.gen
- JS/IFrame.gen.a
- JS/IFrame.gen.h
- JS/Iframe.gen
- JS/PornPopup
- JS/Redirector.ad
- JS/Redirector.af
- JS/Redirector.an
- JS/Redirector.c
- JS/Wonka
- JV/Blacole.dx
- Joke-ArchSMS.f
- Karp.ai
- Karp.c
- Karp.w.a
- Karp.w.b
- Katusha
- Keylog-FAE
- Keylog-SFY.dr
- Kryp.c
- Kryp.d
- Kryp.e
- Linkun
- LowFox
- Luckyleap
- MMBuilderSFX
- MPGH
- MalHeur-ACE
- MaskPE
- Matrix-Lock
- Maxiget
- Mplug.gen.a
- Mutilator
- NSAnti
- New Installer
- New Packer
- OSX/Baoba
- Obfuscated JScript.d
- Obfuscated JScript.e
- ObfuscatedAutoIt.a
- PE-Armour
- PEP
- PUP-FGB
- PUP-FGC
- PUP-FGE
- PWCrack-PWDump
- PWCrack-SQLRemote
- PWS-Zbot!mxr
- PWS-Zbot.dx
- PWS-Zbot.dx!rar
- PWS-Zbot.dx!zip
- Packsu
- PePatch-poly.a
- PePatch-poly.b
- PolyCrypt
- Polyene
- PowerPack
- RCryptor
- RCryptor 1.6d
- RCryptor 2.0
- RLPack
- RPCrypt
- Ransom.dx
- RarSFX
- Revolt.a
- Revolt.b
- Revolt.c
- RuBoard
- SmartInstallMaker
- Somoto-BetterInstaller
- Spyware-Nucleus
- Spyware-RemoteSpy
- Spyware-UltraKeyboard
- Suspicious Keygen!rar
- Themida
- Thinstall
- Tool-FaceHack
- Tool-NetCat
- Tool-ProcKill
- Tool-VPassDecode
- Toolbar-Browser
- Toolbar-Inbox
- TorrentSFX
- Trojan-SkyHook
- UltraDownload
- Ultrarchive
- Upatre.dx!zip
- VBS/IE-Title
- W32/Gaobot.worm
- W32/Generic.worm!irc
- W32/Generic.worm.aa
- W32/Generic.worm.ab
- W32/Generic.worm.ac
- W32/Generic.worm.ad
- W32/Generic.worm.ae
- W32/Generic.worm.af
- W32/Generic.worm.ag
- W32/Generic.worm.h
- W32/Generic.worm.i
- W32/Generic.worm.j
- W32/Generic.x
- W32/Generic.y
- W32/Generic.z
- W32/Harwig.worm
- W32/Mytob.gen@MM
- W32/Mytob.worm
- W32/Polip
- W32/Spybot.worm
- WebexpEnhanced
- WinAceSFX
- WiseSFX
- nBinder 5
- nPack
- oRiEN
- prefetch_clean
- ransom.dx
- with fishy extension
- ~T-SUS-BT
- ~T-SUS-BU
- ~T-SUS-BV
- Enhanced Detections:
- Adware-BetterSurf
- Adware-Bprotect
- Adware-DomaIQ
- Adware-Eorezo
- Adware-OutBrowse
- Crossrider
- EXECryptor
- Exploit-DcomRpc
- Exploit-Lsass
- Exploit-XMLhttp.d
- Exploit-XMLhttp.d.gen
- Exploit-XMLhttpd.d
- FakeAlert.dx
- Generic.dam
- Generic.dx
- Generic.oh
- Generic.on
- Generic.ow
- Generic.rk
- Generic.sp
- Generic.sq
- Generic.sr
- Generic.tz
- Generic.ui
- Generic.un
- Generic.uo
- Generic.vt
- HTool-JSP/WebShell
- HTool-JSPRat
- HTool-RemoteCmd
- HideWindow
- JS/IFrame.gen
- JS/Redirector
- JV/Blacole.dx
- PEP
- PWCrack-PWDump
- PWS-Zbot
- PWS-Zbot.dx
- PWS-Zbot.dx!zip
- Polyene
- RCryptor
- Ransom.dx
- Themida
- Trojan-Injector
- Trojan-Ransom
- Trojan-SkyHook
- Upatre.dx!zip
- VBS/IE-Title
- W32/Gaobot.worm
- W32/Mytob.gen@MM
- W32/Sdbot.worm
- W32/Spybot.worm
- WiseSFX
- ZeroAccess
- ransom.dx
Changes for v12.1.0.2949 - v12.1.0.2952
- New Detections:
- W32/Virut.p
- Enhanced Detections:
- Exploit-CVE2017-8759.m
- JV/Exploit-Blacole.t
Changes for v12.1.0.2880 - v12.1.0.2946
- New Detections:
- Trojan-FastCash
- Enhanced Detections:
- Trojan-CoinMiner
- Trojan-FQGY!eml
Changes for v12.1.0.2877 - v12.1.0.2880
- Enhanced Detections:
- Trojan-AitInject.u
- Trojan-PoweLike!lnk
Changes for v12.1.0.2876 - v12.1.0.2877
- Enhanced Detections:
- Generic Exploit.t
Changes for v12.1.0.2875 - v12.1.0.2876
- New Detections:
- ANDROID/Spy.a
- Generic Packed.iso
- Enhanced Detections:
- AutoIt/Injector.i
- Generic Exploit.f
- Generic Trojan.i
- Trojan-AitInject.u
Changes for v12.1.0.2873 - v12.1.0.2875
- New Detections:
- CoinMiner.b
- Packed-FNF
- Enhanced Detections:
- Emotet-FHN
- Generic HackTool
- Trojan-AitInject.u
- Trojan-AitInject.v
Changes for v12.1.0.2871 - v12.1.0.2873
- New Detections:
- Ran-GandCrabv4
- Enhanced Detections:
- Trojan-BackSwap.a
Changes for v12.1.0.2866 - v12.1.0.2871
- New Detections:
- Python/Ransom.d
- Enhanced Detections:
- Generic Trojan.i
- Trojan-Stealer
Changes for v12.1.0.2865 - v12.1.0.2866
- New Detections:
- Ransom-Ryuk
- Ransom-Warskwing
Changes for v12.1.0.2862 - v12.1.0.2865
- New Detections:
- Trojan-Agent
- Trojan-Batch
- Trojan-JStarter
- Trojan-Zbot
- Enhanced Detections:
- CVE2017-11882
Changes for v12.1.0.2861 - v12.1.0.2862
- Enhanced Detections:
- XML/Deeplink.b
Changes for v12.1.0.2856 - v12.1.0.2861
- New Detections:
- coinminer
- Enhanced Detections:
- Emotet-FHN
- Generic Trojan.i
- Generic-FAEX
- JV/Payload.a
- coinminer
Changes for v12.1.0.2855 - v12.1.0.2856
- New Detections:
- Generic-FAEX
- Trojan-AitInject.t
- Enhanced Detections:
- AutoIt/Injector.i
Changes for v12.1.0.2854 - v12.1.0.2855
- New Detections:
- Trojan-AitInject.s
- Enhanced Detections:
- BackDoor-NJRat!Rar
- Generic Trojan.c
- Ransom-O
Changes for v12.1.0.2853 - v12.1.0.2854
- New Detections:
- Trojan-AitInject.r
- Enhanced Detections:
- CoinMiner
- Exploit-CVE2015-1592
- Exploit-CVE2017-11882.aq
- Trojan-AitInject.q
- Trojan-Zebrocy
- cleanStartUpEntriesCLIB
Changes for v12.1.0.2818 - v12.1.0.2826
- New Detections:
- Packed-FNE
- Trojan-PWS
- Enhanced Detections:
- CoinMiner
Changes for v12.1.0.2817 - v12.1.0.2818
- New Detections:
- Trojan-GoBot
- Enhanced Detections:
- Generic Packed.ace
- Generic Trojan.c
- Trojan-Marduk.a
Changes for v12.1.0.2816 - v12.1.0.2817
- New Detections:
- Exploit-HWP
- PS/EternalBlue
- PS/Invex
- Enhanced Detections:
- Generic Trojan.c
- Generic Trojan.i
- Generic Trojan.iso
- Generic trojan.i
Changes for v12.1.0.2815 - v12.1.0.2816
- New Detections:
- Exploit-HWP
- Enhanced Detections:
- Generic Trojan.i
- Generic trojan.i
Changes for v12.1.0.2759 - v12.1.0.2763
- New Detections:
- Generic PWS.p
- Enhanced Detections:
- CVE2017-11882
- Generic Packed.tmda
- JS/Exploit-Blacole.ht
Changes for v12.1.0.2757 - v12.1.0.2759
- Enhanced Detections:
- Exploit-CVE2017-8759.m
- Generic Trojan.i
- Ransom-O
Changes for v12.1.0.2752 - v12.1.0.2757
- New Detections:
- Exploit-CVE2018-4490
- Enhanced Detections:
- AutoIt/Injector.f
- Exploit-CVE2017-0199
- Exploit-CVE2018-0946
- Exploit-CVE2018-0951
- Exploit-CVE2018-0953
- Exploit-CVE2018-0954
- Exploit-CVE2018-0955
- Exploit-CVE2018-8114
- Exploit-CVE2018-8122
- Exploit-CVE2018-8123
- Exploit-CVE2018-8133
- Exploit-CVE2018-8174
- Exploit-CVE2018-8179
- Generic Trojan.i
- Generic Trojan.j
Changes for v12.1.0.2712 - v12.1.0.2714
- Enhanced Detections:
- Exploit-CVE2017-8759
- Generic Trojan.i
Changes for v12.1.0.2711 - v12.1.0.2712
- Enhanced Detections:
- Exploit-CVE2017-0199
- Exploit-CVE2017-0199.bf
- Exploit-RTF.Generic
- Exploit-RTF.Yoban
- WASM/CoinMiner.b
- WASM/CoinMiner.c
- WASM/CoinMiner.d
Changes for v12.1.0.2710 - v12.1.0.2711
- Enhanced Detections:
- Exploit-CVE2017-0199
- GZIP_Bug_1231494_Fix
- Generic Exploit.a
- Generic Trojan.b
Changes for v12.1.0.2701 - v12.1.0.2710
- New Detections:
- Exploit-CVE2017-0199.bg
- Exploit-RTF.Generic
- Exploit-RTF.Yoban
- Generic Exploit.t
- WASM/CoinMiner.b
- WASM/CoinMiner.c
- WASM/CoinMiner.d
- Enhanced Detections:
- Emotet-FCY!
- Exploit-CVE2018-0825
- Generic Trojan.i
Changes for v12.1.0.2699 - v12.1.0.2701
- New Detections:
- Exploit-CVE2017-11882.k
- PYTHON/Dropper.b
- Enhanced Detections:
- Bat/CoinMiner
- CVE2017-11882
- CoinMiner
- Emotet-FCY!
- Exploit-CVE2017-11882
- Generic Trojan.i
- Generic Trojan.j
- NSIS/Coinminer.a
Changes for v12.1.0.2696 - v12.1.0.2699
- Enhanced Detections:
- Exploit-CVE2017-8759.v
- Exploit-CVE2018-4878.h
Changes for v12.1.0.2694 - v12.1.0.2696
- New Detections:
- Ransom-GandCrab
- Enhanced Detections:
- CoinMiner-Remnant
- Emotet-FCY!
- Exploit-CVE2017-0199
- Exploit-CVE2017-11882
- Exploit-CVE2017-11882.j
- Exploit-CVE2017-8759.m
- Exploit-CVE2017-8759.v
- JS/Exploit-Rigkit.p
- NSIS/Coinminer.a
Changes for v12.1.0.2692 - v12.1.0.2694
- New Detections:
- Exploit-CVE2017-8759.v
- Exploit-CVE2018-4878.h
- Enhanced Detections:
- Emotet-FCY!
- Exploit-CVE2017-11882
- Generic Packed.ace
- Generic Trojan.j
Changes for v12.1.0.2689 - v12.1.0.2692
- New Detections:
- Fareit-FKS
- Enhanced Detections:
- Emotet-FCY!
- Exploit-CVE2017-8759.m
- Exploit-RTF
- Generic Packed.ace
- Generic Trojan.i
- OSX/Coinminer
Changes for v12.1.0.2687 - v12.1.0.2689
- New Detections:
- OSX/Coinminer
- Enhanced Detections:
- CoinMiner
- CoinMiner.a
- Exploit-CVE2017-0199
- Exploit-CVE2017-0199.be
Changes for v12.1.0.2682 - v12.1.0.2687
- New Detections:
- Exploit-CVE2017-8759.r
- Exploit-CVE2017-8759.s
- Exploit-CVE2018-4878.e
- Exploit-CVE2018-4878.f
- Exploit-CVE2018-4878.g
- Enhanced Detections:
- Exploit-CVE2015-1650
- Exploit-CVE2017-8759.p
- Generic Trojan.iso
Changes for v12.1.0.2675 - v12.1.0.2682
- New Detections:
- 7zipSFX
- AT4RE Protector
- Adware-AddLyrics
- Adware-BProtect
- Adware-BSurf
- Adware-BetterInstaller
- Adware-BetterSurf
- Adware-Bprotect
- Adware-Bprotect.a
- Adware-Bprotect.b
- Adware-Bprotect.c
- Adware-DomaIQ
- Adware-Eorezo
- Adware-Hebogo
- Adware-Iffinity
- Adware-InstallQ
- Adware-MegaSearch
- Adware-MixiDJToolbar
- Adware-Monetizer
- Adware-NewNext
- Adware-OutBrowse
- Adware-PowerOffer
- Adware-SaveShare
- Adware-SweetIM
- Adware-iBryte
- AlexProtect
- AntiDote
- AstrumSFX
- AutoHotKey
- AutoIT
- AutoIT 2.6.4
- AutoIT 3.0.x.x - 3.1.x.x
- AutoIT 3.2.0.x - 3.2.5.x
- AutoIT 3.2.6.x+
- Bat To Exe Converter
- Bat/Mumu.worm
- Bojan
- BrainInstall
- CoinMiner.a
- Corebot!mxr
- Crossrider
- DMG
- DirectDownminer
- DistTrack!sys
- Distromatic
- DomaIQ
- Downloader-BPJ.gen.a
- Downloader-FKW
- Downloader-FMA
- Downloader-FMB
- Downloader-FMJ
- DriverPack
- EXECrypter
- EXECryptor
- Efca
- Encoded Executable
- Enigma
- Excalibur
- Exploit-DcomRpc
- Exploit-DcomRpc.b
- Exploit-DcomRpc.dll
- Exploit-IFrame.gen.ah
- Exploit-IFrame.gen.ak
- Exploit-IFrame.gen.am
- Exploit-Lsass
- Exploit-Lsass.dll
- Exploit-MS04-011
- Exploit-MS04-011.gen
- Exploit-SWF!Blacole.dx
- Exploit-XMLhttp.d
- Exploit-XMLhttp.d.gen
- Exploit-XMLhttp.d.gen.b
- Exploit-XMLhttpd.d
- Exploit-XMLhttpd.gen.c
- FakeAlert.dx
- FishPE.a
- FreeKey
- GameEnix
- GameVance.gen.be
- GameVance.gen.bf
- Generic Malware.af!ats
- Generic Malware.ce!pec
- Generic Malware.ev!pec
- Generic.Dropped.a
- Generic.Miuref.dx
- Generic.Upatre.dx
- Generic.dam
- Generic.gl
- Generic.it
- Generic.iu
- Generic.iw
- Generic.jb
- Generic.jg
- Generic.jk
- Generic.jl
- Generic.jp
- Generic.jq
- Generic.jv
- Generic.jw
- Generic.jx
- Generic.jy
- Generic.kg
- Generic.kh
- Generic.kk
- Generic.ko
- Generic.kp
- Generic.kq
- Generic.kr
- Generic.ks
- Generic.ku
- Generic.la
- Generic.le
- Generic.lp
- Generic.lq
- Generic.lr
- Generic.lt
- Generic.lu
- Generic.lv
- Generic.lw
- Generic.lx
- Generic.ma
- Generic.mf
- Generic.mg
- Generic.mh
- Generic.mi
- Generic.mj
- Generic.mk
- Generic.ml
- Generic.mm
- Generic.mn
- Generic.mt
- Generic.mu
- Generic.mv
- Generic.mw
- Generic.mx
- Generic.my
- Generic.nd
- Generic.ne
- Generic.nf
- Generic.ni
- Generic.nj
- Generic.nn
- Generic.no
- Generic.np
- Generic.nq
- Generic.nr
- Generic.nv
- Generic.nw
- Generic.nx
- Generic.ny
- Generic.nz
- Generic.og
- Generic.oh
- Generic.om
- Generic.on
- Generic.oo
- Generic.op
- Generic.oq
- Generic.ou
- Generic.ov
- Generic.ow
- Generic.ox
- Generic.pa
- Generic.pb
- Generic.pk
- Generic.pl
- Generic.pm
- Generic.pt
- Generic.pu
- Generic.px
- Generic.py
- Generic.pz
- Generic.qc
- Generic.qd
- Generic.qe
- Generic.qi
- Generic.qj
- Generic.qk
- Generic.ql
- Generic.qm
- Generic.qn
- Generic.qo
- Generic.qp
- Generic.qq
- Generic.qr
- Generic.qu
- Generic.qv
- Generic.qw
- Generic.qy
- Generic.qz
- Generic.ra
- Generic.rb
- Generic.rc
- Generic.rd
- Generic.re
- Generic.rf
- Generic.rj
- Generic.rk
- Generic.rl
- Generic.rm
- Generic.ro
- Generic.rt
- Generic.sb
- Generic.sc
- Generic.sd
- Generic.sg
- Generic.si
- Generic.sj
- Generic.sn
- Generic.so
- Generic.sp
- Generic.sq
- Generic.sr
- Generic.ss
- Generic.st
- Generic.su
- Generic.sv
- Generic.sw
- Generic.tb
- Generic.tc
- Generic.td
- Generic.te
- Generic.tf
- Generic.tl
- Generic.to
- Generic.tp
- Generic.tq
- Generic.tr
- Generic.ts
- Generic.tt
- Generic.tu
- Generic.tv
- Generic.tz
- Generic.ua
- Generic.ub
- Generic.ud
- Generic.ue
- Generic.uf
- Generic.ug
- Generic.ui
- Generic.uj
- Generic.uk
- Generic.um
- Generic.un
- Generic.uo
- Generic.uq
- Generic.ur
- Generic.ut
- Generic.vg
- Generic.vm
- Generic.vn
- Generic.vt
- Generic.vu
- GenteeInstaller
- GnuCompiler
- GoToAssist
- Golroted!mxr
- Golroted-TRG
- HTool-JSP/WebShell
- HTool-JSPRat
- HTool-RemoteCmd
- HackPack.a
- HackTool-ZBotBuilder
- HideWindow
- HideWindow.dll
- InnoSFX
- InstallCore
- InstallMonster
- InstallShieldSFX
- Installrex.dr
- Ividi
- Iwin
- JS/Blacole.dx
- JS/Downloader-AUE
- JS/Downloader-FCV
- JS/IFrame.gen
- JS/IFrame.gen.a
- JS/IFrame.gen.h
- JS/Iframe.gen
- JS/PornPopup
- JS/Redirector.ad
- JS/Redirector.af
- JS/Redirector.an
- JS/Redirector.c
- JS/Wonka
- JV/Blacole.dx
- Joke-ArchSMS.f
- Karp.ai
- Karp.c
- Karp.w.a
- Karp.w.b
- Katusha
- Keylog-FAE
- Keylog-SFY.dr
- Kryp.c
- Kryp.d
- Kryp.e
- Kuluoz!mxr
- Linkun
- LowFox
- Luckyleap
- MMBuilderSFX
- MPGH
- MalHeur-ACE
- MaskPE
- Matrix-Lock
- Maxiget
- Mplug.gen.a
- Mutilator
- NSAnti
- New Installer
- New Packer
- OSX/Baoba
- Obfuscated JScript.d
- Obfuscated JScript.e
- ObfuscatedAutoIt.a
- PE-Armour
- PEP
- PUP-FGB
- PUP-FGC
- PUP-FGE
- PWCrack-PWDump
- PWCrack-SQLRemote
- PWS-Zbot!mxr
- PWS-Zbot.dx
- PWS-Zbot.dx!rar
- PWS-Zbot.dx!zip
- Packsu
- PePatch-poly.a
- PePatch-poly.b
- PolyCrypt
- Polyene
- PowerPack
- RCryptor
- RCryptor 1.6d
- RCryptor 2.0
- REG/Downloader.a
- RLPack
- RPCrypt
- Ransom.dx
- RarSFX
- Revolt.a
- Revolt.b
- Revolt.c
- RuBoard
- SmartInstallMaker
- Somoto-BetterInstaller
- Spora!Trg
- Spora!mxr
- Spyware-Nucleus
- Spyware-RemoteSpy
- Spyware-UltraKeyboard
- Suspicious Keygen!rar
- TeslaCrypt!mxr
- TeslaCrypt-TRG
- Themida
- Thinstall
- Tool-FaceHack
- Tool-NetCat
- Tool-ProcKill
- Tool-VPassDecode
- Toolbar-Browser
- Toolbar-Inbox
- TorrentSFX
- Trojan-SkyHook
- UltraDownload
- Ultrarchive
- Upatre.dx!zip
- VBS/IE-Title
- W32/Gaobot.worm
- W32/Generic.worm!irc
- W32/Generic.worm.aa
- W32/Generic.worm.ab
- W32/Generic.worm.ac
- W32/Generic.worm.ad
- W32/Generic.worm.ae
- W32/Generic.worm.af
- W32/Generic.worm.ag
- W32/Generic.worm.h
- W32/Generic.worm.i
- W32/Generic.worm.j
- W32/Generic.x
- W32/Generic.y
- W32/Generic.z
- W32/Harwig.worm
- W32/Mytob.gen@MM
- W32/Mytob.worm
- W32/Polip
- W32/Spybot.worm
- WebexpEnhanced
- WinAceSFX
- WiseSFX
- nBinder 5
- nPack
- oRiEN
- prefetch_clean
- ransom.dx
- with fishy extension
- ~T-SUS-BT
- ~T-SUS-BU
- ~T-SUS-BV
- Enhanced Detections:
- Adware-BetterSurf
- Adware-Bprotect
- Adware-DomaIQ
- Adware-Eorezo
- Adware-OutBrowse
- Crossrider
- EXECryptor
- Exploit-CVE2017-8759.p
- Exploit-DcomRpc
- Exploit-Lsass
- Exploit-XMLhttp.d
- Exploit-XMLhttp.d.gen
- Exploit-XMLhttpd.d
- FakeAlert.dx
- Generic.dam
- Generic.dx
- Generic.oh
- Generic.on
- Generic.ow
- Generic.rk
- Generic.sp
- Generic.sq
- Generic.sr
- Generic.tz
- Generic.ui
- Generic.un
- Generic.uo
- Generic.vt
- HTool-JSP/WebShell
- HTool-JSPRat
- HTool-RemoteCmd
- HideWindow
- JS/IFrame.gen
- JS/Redirector
- JV/Blacole.dx
- Kuluoz
- PEP
- PWCrack-PWDump
- PWS-Zbot
- PWS-Zbot.dx
- PWS-Zbot.dx!zip
- Polyene
- RCryptor
- Ransom-Saturn
- Ransom.dx
- Themida
- Trojan-SkyHook
- Upatre.dx!zip
- VBS/IE-Title
- W32/Gaobot.worm
- W32/Mytob.gen@MM
- W32/Sdbot.worm
- W32/Spybot.worm
- WiseSFX
- ZeroAccess
- ransom.dx
Changes for v12.1.0.2674 - v12.1.0.2675
- New Detections:
- Exploit-CVE2017-0199.bb
- Exploit-CVE2017-8759.p
- ISO/Trojan.b
- Enhanced Detections:
- CoinMiner
- CoinMiner-XMR
- Exploit-CVE2017-0199
- Exploit-cve2017-0199.ba
- Generic Trojan.be
- W32/WinDex.i
Changes for v12.1.0.2669 - v12.1.0.2674
- New Detections:
- NSIS/Injector.a
- Enhanced Detections:
- Exploit-CVE2017-0199.au
- Exploit-CVE2017-0199.ay
- Exploit-CVE2017-0199.az
- Generic Exploit.s
Changes for v12.1.0.2668 - v12.1.0.2669
- New Detections:
- BAT\PZCHAO
- Exploit-CVE2017-0199.av
- Exploit-CVE2017-0199.aw
- Trojan-PZCHAO
- Enhanced Detections:
- Emotet-FCY!
- Exploit-CVE2017-0199
- Exploit-CVE2017-0199.aq
- Exploit-CVE2017-0199.au
- Exploit-CVE2017-11882.e
- Generic Trojan.i
- PWS-Zbot
- VBS/Powershell.a
Changes for v12.1.0.2662 - v12.1.0.2668
- New Detections:
- Exploit-CVE2017-11882.i
- Exploit-SWF.bz
- Enhanced Detections:
- Exploit-CVE2017-0199
- Exploit-CVE2017-0199.au
- Exploit-CVE2017-11882.d
- W32/CoinMiner.g
Changes for v12.1.0.2651 - v12.1.0.2662
- New Detections:
- Exploit-CVE2017-0199.au
- Packed-YQ
- Enhanced Detections:
- Generic trojan.i
- JS/Redirector
Changes for v12.1.0.2650 - v12.1.0.2651
- New Detections:
- Exploit-CVE2017-0199.aq
- Generic Exploit.a
- VBS/Powershell.a
- Enhanced Detections:
- Trojan-Meltdown
Changes for v12.1.0.2630 - v12.1.0.2650
- New Detections:
- Exploit-CVE2017-11882.d
- Enhanced Detections:
- Emotet-FCY!
- Exploit-CVE2017-11882.b
- Exploit-CVE2017-8759.m
- JS/Exploit-Rigkit.p
Changes for v12.1.0.2616 - v12.1.0.2619
- Enhanced Detections:
- Generic Trojan.i
- Generic Trojan.j
- JS/Exploit-Rigkit.n
Changes for v12.1.0.2614 - v12.1.0.2616
- Enhanced Detections:
- 1
- Generic Trojan.i
Changes for v12.1.0.2610 - v12.1.0.2614
- New Detections:
- Python/Ransom.c
Changes for v12.1.0.2608 - v12.1.0.2610
- Enhanced Detections:
- Emotet-FCY!
- Exploit-CVE2017-8759
- Ransom-Hydracrypt
- Trojan-CoinMiner
Changes for v12.1.0.2607 - v12.1.0.2608
- New Detections:
- Exploit-CVE2017-8759.k
- Enhanced Detections:
- Exploit-CVE2017-8759
- Exploit-CVE2017-8759.j
- Generic Trojan.iso
- Generic trojan.i
Changes for v12.1.0.2589 - v12.1.0.2607
- Enhanced Detections:
- Exploit-CVE2017-8759.h
- Generic.dx!ofd
Changes for v12.1.0.2569 - v12.1.0.2589
- New Detections:
- Exploit-CVE2017-8759.h
- Enhanced Detections:
- Emotet-FDI!
Changes for v12.1.0.2567 - v12.1.0.2569
- Enhanced Detections:
- Emotet-FCY!
- Emotet-FDI!
- Exploit-CVE2016-0189
- Golroted.gen.n
- PWS-Emotet.a!
Changes for v12.1.0.2564 - v12.1.0.2567
- New Detections:
- Exploit-CVE2015-1650
- Golroted.gen.m
- Seduploader
- Enhanced Detections:
- Emotet-FAX!
- W32/Autorun.worm.aaeh
Changes for v12.1.0.2524 - v12.1.0.2564
- Enhanced Detections:
- Emotet-FAX!
- Emotet-FCY!
Changes for v12.1.0.2521 - v12.1.0.2524
- New Detections:
- Emotet-FAX!
- Emotet-FCB!
- Enhanced Detections:
- Exploit-CVE2017-0199.ak
- Exploit-CVE2017-0199.al
- Exploit-CVE2017-11791
- Exploit-CVE2017-11793
- Exploit-CVE2017-11798
- Generic Exploit.s
- Trojan-Veil!rb
Changes for v12.1.0.2509 - v12.1.0.2521
- New Detections:
- Exploit-CVE2017-0199.al
- Trojan-Veil!rb
- Enhanced Detections:
- Exploit-CVE2017-0199.d
Changes for v12.1.0.2508 - v12.1.0.2509
- New Detections:
- Genkryptic.gen.a
- Enhanced Detections:
- Exploit-CVE2015-1641!rtf
- Exploit-CVE2017-0199
- Exploit-CVE2017-0199.v
- Golroted.gen.h
- Trojan-AitInject.o
Changes for v12.1.0.2506 - v12.1.0.2508
- New Detections:
- P55
- RTF/Obfus.b
- Trojan-AitInject.o
- Enhanced Detections:
- Generic Trojan.j
Changes for v12.1.0.2505 - v12.1.0.2506
- Enhanced Detections:
- Exploit-CVE2017-0199
- Generic Downloader.gm
Changes for v12.1.0.2500 - v12.1.0.2504
- New Detections:
- Exploit-CVE2017-8759
- Enhanced Detections:
- Exploit-CVE2017-8759.g
- Generic Trojan.i
Changes for v12.1.0.2497 - v12.1.0.2500
- New Detections:
- Exploit-CVE2017-8759.g
- Enhanced Detections:
- Exploit-CVE2017-0199.aa
- Exploit-CVE2017-8759.d
- Exploit-CVE2017-8759.e
- Exploit-CVE2017-8759.f
- Ransom-GlobeImp
- Ransomware-Cerber
Changes for v12.1.0.2495 - v12.1.0.2497
- Enhanced Detections:
- Exploit-CVE2017-0199.d
- Exploit-CVE2017-8759.b
- Exploit-CVE2017-8759.c
- Generic Trojan.i
- Java/Adwind
Changes for v12.1.0.2493 - v12.1.0.2495
- New Detections:
- Exploit-CVE2017-8759.d
- Exploit-CVE2017-8759.e
- Exploit-CVE2017-8759.f
- Enhanced Detections:
- Exploit-CVE2017-0199.ah
- Exploit-CVE2017-0199.ai
- Exploit-CVE2017-0199.aj
Changes for v12.1.0.2490 - v12.1.0.2493
- New Detections:
- Exploit-CVE2017-8759.a
- Exploit-CVE2017-8759.b
- Exploit-CVE2017-8759.c
- Enhanced Detections:
- Exploit-CVE2017-0199.ag
Changes for v12.1.0.2468 - v12.1.0.2473
- New Detections:
- Malformed-Putty
- Enhanced Detections:
- Generic PWS.o
- Generic trojan.i
Changes for v12.1.0.2465 - v12.1.0.2468
- Enhanced Detections:
- Exploit-CVE2017-0199.d
- Exploit-CVE2017-0199.x
Changes for v12.1.0.2459 - v12.1.0.2465
- Enhanced Detections:
- Exploit-CVE2017-0199.d
- Exploit-MS17-010.d
- Generic Trojan.i
- Generic Trojan.j
- JS/Downloader.gen.fa
- PY/Exploit-MS17-010.a
- PY/Exploit-MS17-010.b
- PY/Exploit-MS17-010.c
Changes for v12.1.0.2458 - v12.1.0.2459
- Enhanced Detections:
- Exploit-CVE2017-0199
- Generic Trojan.ba
- Golroted.gen.h
- Ransom-Spora
Changes for v12.1.0.2457 - v12.1.0.2458
- New Detections:
- Ransom-Bitpaymer
- Trojan-TrickBot
- Enhanced Detections:
- AutoIt/Injector.d
- PWSZbot-FHN
Changes for v12.1.0.2456 - v12.1.0.2457
- New Detections:
- Exploit-CVE2017-0199.x
- Generic PWS.y
- W32/Prepscram.a
- Enhanced Detections:
- AutoIt/injector.C
- Trojan-CoinMiner
Changes for v12.1.0.2455 - v12.1.0.2456
- New Detections:
- AutoIt/Injector.d
- Generic Trojan.iso
- JS/Downloader.gen.fa
- Enhanced Detections:
- Exploit-CVE2015-2545
Changes for v12.1.0.2454 - v12.1.0.2455
- Enhanced Detections:
- Exploit-CVE2017-0199
- Exploit-CVE2017-0199.x
- Exploit-CVE2017-0199.z
- Generic PWS.o
- Generic Trojan.i
- Generic trojan.i
Changes for v12.1.0.2452 - v12.1.0.2454
- New Detections:
- P54
- Enhanced Detections:
- Exploit-CVE2017-0199.y
- Generic Trojan.i
- W32/CoinMiner.f
Changes for v12.1.0.2451 - v12.1.0.2452
- New Detections:
- Exploit-CVE2017-0199.z
- Enhanced Detections:
- Exploit-CVE2017-0199.w
- Generic Trojan.ba
Changes for v12.1.0.2443 - v12.1.0.2451
- New Detections:
- Exploit-CVE2017-0199.y
- Enhanced Detections:
- Exploit-CVE2017-0199.u
- Exploit-CVE2017-0199.v
- Generic PWS.y
- Generic Trojan.i
- Generic Trojan.j
- Golroted.gen.h
Changes for v12.1.0.2441 - v12.1.0.2443
- Enhanced Detections:
- Exploit-CVE2017-0199.r
- Exploit-CVE2017-0199.s
- Exploit-CVE2017-0199.t
- Generic trojan.i
- Golroted.gen.g
- RTF/Obfus.a
Changes for v12.1.0.2435 - v12.1.0.2441
- Enhanced Detections:
- Generic Trojan.j
- Generic trojan.i
- PWSZbot-FHN
Changes for v12.1.0.2432 - v12.1.0.2435
- Enhanced Detections:
- Exploit-CVE2017-8594
- Exploit-CVE2017-8598
- Exploit-CVE2017-8601
- Exploit-CVE2017-8605
- Exploit-CVE2017-8617
- Exploit-CVE2017-8619
Changes for v12.1.0.2430 - v12.1.0.2432
- New Detections:
- Exploit-CVE2017-0199.s
- Exploit-CVE2017-0199.t
- RTF/Obfus.a
- Enhanced Detections:
- Exploit-CVE2017-0199
- Exploit-CVE2017-0199.r
- Golroted.gen.g
- JS/Exploit-Shellcode.a
- PWSZbot-FHN
Changes for v12.1.0.2429 - v12.1.0.2430
- New Detections:
- Ransom-Matrix
- Enhanced Detections:
- Exploit-CVE2017-0199.d
- Generic Trojan.az
- Generic Trojan.i
- Generic trojan.i
- PWSZbot-FHN
- Ransom-O
Changes for v12.1.0.2426 - v12.1.0.2429
- New Detections:
- AutoIt/injector.C
- Spora!Trg
- Spora!mxr
- Enhanced Detections:
- Generic trojan.i
- PWSZbot-FHN
Changes for v12.1.0.2424 - v12.1.0.2426
- Enhanced Detections:
- Generic trojan.i
- PWSZbot-FHN
Changes for v12.1.0.2421 - v12.1.0.2424
- Enhanced Detections:
- Generic FakeAlert
- Generic trojan.i
- PWSZbot-FHN
- Ransom-Wannacry.b
Changes for v12.1.0.2406 - v12.1.0.2418
- Enhanced Detections:
- Generic Trojan.j
- PWSZbot-FHN
Changes for v12.1.0.2405 - v12.1.0.2406
- Enhanced Detections:
- Generic Trojan.av
- Generic trojan.i
Changes for v12.1.0.2403 - v12.1.0.2405
- New Detections:
- Exploit-CVE2017-0199.n
- Exploit-CVE2017-0199.o
- Generic Trojan.av
- PDF/Generic.a
- Enhanced Detections:
- Downloader-BCS
- Generic Trojan.i
- Generic trojan.i
- PWSZbot-FHN
Changes for v12.1.0.2401 - v12.1.0.2403
- New Detections:
- Generic Trojan.au
- Enhanced Detections:
- Generic trojan.i
- PWSZbot-FHN
Changes for v12.1.0.2399 - v12.1.0.2401
- New Detections:
- Trojan-AitInject.N
- Enhanced Detections:
- Generic trojan.i
- Java/Adwind
- PWSZbot-FHN
Changes for v12.1.0.2398 - v12.1.0.2399
- New Detections:
- Exploit-CVE2017-0199.m
- Enhanced Detections:
- Exploit-CVE2017-0199
- Exploit-CVE2017-0199.l
- Generic Trojan.at
- Generic Trojan.i
- Trojan-CoinMiner
Changes for v12.1.0.2388 - v12.1.0.2389
- Enhanced Detections:
- Generic Trojan.as
- HackTool-Shadowbrokers
- JS/Exploit-Rigkit.m
- Trojan.EternalRocks
Changes for v12.1.0.2383 - v12.1.0.2388
- New Detections:
- Generic Trojan.as
- Generic Trojan.x
- NSIS/ProxyAgent.a
- NSIS/SchoolBoy.a
- W32/MSILRsrcRescan
- Win32/3Proxy.a
- Enhanced Detections:
- Exploit-CVE2017-0199
- Generic Trojan.i
- Generic Trojan.o
- Generic trojan.i
- NSIS/ProxyAgent.a
- NSIS/SchoolBoy.a
- Ransom-O
- Ransomware-Cerber
- with fishy extension
Changes for v12.1.0.2376 - v12.1.0.2383
- New Detections:
- Generic Trojan.ar
- Enhanced Detections:
- Exploit-CVE2017-0199
- Generic Trojan.i
- Generic Trojan.o
- Generic trojan.i
- JS/Redirector.eb
- NSIS/Addrop
- PWSZbot-FHN
- Ransom-WannaCry
- Ransom-WannaCry!lnk
- Ransomware-Cerber
Changes for v12.1.0.2374 - v12.1.0.2376
- New Detections:
- Generic Trojan.an
- Enhanced Detections:
- Generic.y
- Ransom-Cerber
- Ransom-O
Changes for v12.1.0.2372 - v12.1.0.2374
- New Detections:
- JS/Redirector.eb
- Ransom-Cerber.j
- Enhanced Detections:
- Exploit-CVE2017-0199
- Generic Trojan.o
- PWSZbot-FHN
- Ransom-O
- W32/AdylkuzzMiner
- W32/Teerac.b
Changes for v12.1.0.2362 - v12.1.0.2372
- New Detections:
- NSIS/Addrop
- W32/AdylkuzzMiner
- Enhanced Detections:
- Generic Trojan.i
- Generic.y
- JV/Generic.a
- Ransom-Spora.b
- Ransom-WannaCry
Changes for v12.1.0.2358 - v12.1.0.2362
- New Detections:
- JS/Redirector.ea
- Enhanced Detections:
- Exploit-CVE2015-1641.b
- Generic Exploit-RTF.b
- Generic Exploit-RTF.c
- Generic Exploit-RTF.d
- Generic Exploit-RTF.e
- Generic Trojan.i
- Generic Trojan.o
- Java/Adwind
- PWSZbot-FHN
- W32/Autorun.worm.aaeh
Changes for v12.1.0.2357 - v12.1.0.2358
- Enhanced Detections:
- Generic Trojan.j
- W32/XDocCrypt.a!lnk
- with fishy extension
Changes for v12.1.0.2355 - v12.1.0.2357
- New Detections:
- ELF/Sednit
- OSX/Sofacy
- W32/Kovter
- Enhanced Detections:
- Generic Trojan.j
- OSX/DOK
- Ransom-Cryptolocker
- Ransom-O
Changes for v12.1.0.2354 - v12.1.0.2355
- Enhanced Detections:
- Exploit-CVE2015-1641!rtf
- Exploit-CVE2017-0199.h
- Generic Trojan.o
- PS/Trojan-Injector
- Ransom-Spora.b
Changes for v12.1.0.2352 - v12.1.0.2354
- New Detections:
- JV/Generic.a
- Enhanced Detections:
- Generic PWS.o
- Generic Trojan.o
- JS/Exploit-Rigkit.l
- PWSZbot-FHN
Changes for v12.1.0.2351 - v12.1.0.2352
- New Detections:
- OSX/DOK
- Enhanced Detections:
- Exploit-CVE2014-1761!rtf
- Exploit-CVE2017-0199.d
- Exploit-CVE2017-0199.e
- Exploit-CVE2017-0199.f
- Exploit-CVE2017-0199.g
- Exploit-CVE2017-0199.h
- Exploit-CVE2017-0199.i
- Generic Trojan.i
- Generic.y
- JS/Pinkslipbot.c
- PWSZbot-FHN
- Ransom-Tescrypt!txt
- Ransomware-Cerber
- Ransomware-Locky.h!enc
- VBS/BackDoor-NJRat
Changes for v12.1.0.2348 - v12.1.0.2351
- Enhanced Detections:
- W32/Autorun.worm.aaeh
Changes for v12.1.0.2347 - v12.1.0.2348
- New Detections:
- P52
- Enhanced Detections:
- Exploit-CVE2017-0199.i
- Generic Trojan.c
Changes for v12.1.0.2345 - v12.1.0.2347
- New Detections:
- PS/Trojan-Injector
- Enhanced Detections:
- PWSZbot-FHN
- Ransom-O
- VBS/PWS-Dumper.a
Changes for v12.1.0.2344 - v12.1.0.2345
- Enhanced Detections:
- Exploit-CVE2017-0199.d
- Exploit-CVE2017-0199.h
- Generic Trojan.j
- Generic Trojan.o
- Generic.y
- PWSZbot-FHN
- Ransomware-Cerber
- with fishy extension
Changes for v12.1.0.2343 - v12.1.0.2344
- New Detections:
- Exploit-CVE2017-0199.h
- Enhanced Detections:
- Backdoor-PlugX!DAT
- Exploit-CVE2017-0199.d
- Fariet.gen.a
- Generic Trojan.o
- PWSZbot-FHN
Changes for v12.1.0.2341 - v12.1.0.2343
- Enhanced Detections:
- Exploit-CVE2017-0199.d
- Generic Trojan.o
- PWSZbot-FHN
- Ransom-O
- Ransomware-Cerber
- SWF/Exploit-Rig.h
- W32/Teerac.b
- with fishy extension
Changes for v12.1.0.2339 - v12.1.0.2341
- New Detections:
- Exploit-CVE2017-0199.e
- Exploit-CVE2017-0199.f
- Exploit-CVE2017-0199.g
- HackTool-Shadowbrokers
- Enhanced Detections:
- Exploit-CVE2012-0158.s
- Exploit-CVE2017-0199
- Exploit-CVE2017-0199.c
- Exploit-CVE2017-0199.d
- Exploit-CVE2017-0199.f
- FakeAlert-av360
- Generic Trojan.o
- HackTool-Shadowbrokers
- PWS-Zbot.gen.po
- PWSZbot-FHN
- Trojan-Powelike
Changes for v12.1.0.2328 - v12.1.0.2339
- New Detections:
- Exploit-CVE2017-0199
- Exploit-CVE2017-0199.b
- Exploit-CVE2017-0199.c
- Exploit-CVE2017-0199.d
- Enhanced Detections:
- Exploit-CVE2017-0199.b
- Exploit-CVE2017-0199.c
- Exploit-CVE2017-0199.d
- Generic Trojan.i
- PWS-Dridex
- PWSZbot-FHN
- Trojan-Dridex
- Trojan-FLYZ!enc
Changes for v12.1.0.2302 - v12.1.0.2328
- Enhanced Detections:
- DoubleAgent
- Generic PWS.o
- Generic Trojan.i
- PWSZbot-FHN
- Ransom-O
- Ransomware-Locky.k
- Trojan-CoinMiner
Changes for v12.1.0.2287 - v12.1.0.2302
- New Detections:
- NSIS/ObfusRansom.w
- Enhanced Detections:
- Exploit-CVE2012-0158.s
- Generic PWS.o
- Generic Trojan.j
- PWSZbot-FHN
Changes for v12.1.0.2286 - v12.1.0.2287
- New Detections:
- Exploit-CVE2017-0037
- Face.1281
- Ghost.5000a
- Gon
- Gorlovka.1024
- JS/Redirector.dw
- LJF.1098
- LL.579
- LetterH
- Letuchki
- Lexotran
- Lightning.2366
- Lizza.1125
- Lunch.783
- MNA.2876
- Mel.1537
- NSIS/ObfusRansom.v
- Nina.256
- OSX/MacDownloader.a
- Olpho.2033
- PDP
- Quail.414
- Raving.sub.2300
- Rebelbase.1509
- Rebirth.726
- Red.1465
- SVCa
- Uncle.767
- Vampiro
- Vanq
- Vg
- Vibrant.4086
- Vic.793
- Vigo.1000
- Viking.100
- Enhanced Detections:
- Exploit-SWF
- Generic Trojan.ai
- JS/Exploit-Rigkit.k
- OSX/Ransom.FileCoder.e
- PWSZbot-FHN
- Ransom-Spora
Changes for v12.1.0.2269 - v12.1.0.2286
- New Detections:
- Exploit-SWF.by
- Enhanced Detections:
- Generic Trojan.i
- Generic Trojan.o
- Ransom-Cerber!html
- Ransomware-Cerber
- Ransomware-Locky.g
Changes for v12.1.0.2236 - v12.1.0.2237
- New Detections:
- Ransom-Spora.b
- VBS/Downloader.eh
- Enhanced Detections:
- Exploit-CVE2016-7286
- Generic Trojan.i
- PWSZbot-FHN
- Ransom-O
- Ransomware-Cerber
- with fishy extension
Changes for v12.1.0.2222 - v12.1.0.2236
- New Detections:
- NSIS/ObfusRansom.q
- Ransomware-Cerber
- Enhanced Detections:
- Exploit-CVE2016-7200.a
- Exploit-CVE2016-7201.a
- Exploit-CVE2016-7288
- Generic Trojan.ae
- NSIS/ObfusRansom.d
- NSIS/ObfusRansom.p
- PWSZbot-FHN
- Ransom-O
- Trojan-CoinMiner
Changes for v12.1.0.2170 - v12.1.0.2171
- New Detections:
- FakeTC.a
- Generic Trojan.ai
- Generic Trojan.c
- Ransomware-Locky.h!enc
- Enhanced Detections:
- Generic Trojan.ad
- Generic Trojan.i
- PWSZbot-FHN
- Vawtrak.gen.a
Changes for v12.1.0.2153 - v12.1.0.2170
- New Detections:
- Exploit-CVE2015-1641
- PoweDuke
- Enhanced Detections:
- Exploit-CVE2012-0158.ad
- Exploit-CVE2016-7198
- Exploit-CVE2016-7200
- Exploit-CVE2016-7201
- Generic Exploit-RTF.a
- PWSZbot-FHN
- Ransomware-Locky.f!enc
- Ransomware-Locky.g
- VBS/BackDoor-NJRat
Changes for v12.1.0.2144 - v12.1.0.2153
- New Detections:
- BAT/Agent
- BrMediaPlayer.a
- Exploit-SWF.bl
- Exploit-SWF.bm
- JS/Exploit-Rigkit.f
- JS/Exploit-SundownEK
- NSIS/ObfusRansom.h
- SWF/Exploit-Neutrino.a
- SWF/Exploit-Rig.a
- SWF/Exploit-Rig.b
- SWF/Exploit-Rig.c
- SWF/Exploit-Rig.d
- SWF/Exploit-Rig.e
- SWF/Exploit-Rig.f
- Trojan-AitInject.I
- Enhanced Detections:
- Exploit-CVE2016-3298
- Exploit-RTF
- Exploit-SWF.bk
- Generic PWS.o
- Generic Packed.ace
- Generic Trojan.aa
- Generic Trojan.ab
- Generic Trojan.i
- Generic Trojan.j
- JS/Exploit-Rigkit.e
- JS/Lnkpull.a
- PWSZbot-FHN
- Ransom-Cerber!html
- Ransom-O
- Ransomware-Locky
- Ransomware-Locky.f!enc
- SWF/ExploitKit.l
- Trojan-AitInject.H
- Vawtrak.gen.a
Changes for v12.1.0.2140 - v12.1.0.2144
- New Detections:
- Exploit-CVE2016-3298
- Enhanced Detections:
- Exploit-CVE2015-2545
- PWSZbot-FHN
Changes for v12.1.0.2136 - v12.1.0.2140
- New Detections:
- PWS-Zbot.gen.yz
- Enhanced Detections:
- Generic Packed.ace
- Generic Trojan.aa
- Generic Trojan.i
- NSIS/ObfusRansom.d
- PWSZbot-FHN
- Ransomware-Locky.d!enc
Changes for v12.1.0.2135 - v12.1.0.2136
- Enhanced Detections:
- NSIS/ObfusRansom.d
Changes for v12.1.0.2134 - v12.1.0.2135
- New Detections:
- NSIS/ObfusRansom.e
- Enhanced Detections:
- Exploit-CVE2012-0158.n
- Exploit-CVE2016-3377
- Generic PWS.o
- Generic Trojan.i
- Golroted.gen.f
- NSIS/ObfusRansom.a
- OSX/Komplex.d
- PWSZbot-FHN
- Ransomware-Locky.d!enc
- W32/Pate
Changes for v12.1.0.2126 - v12.1.0.2134
- New Detections:
- Exploit-CVE2016-3351
- Kovter!remnants
- Enhanced Detections:
- Exploit-CVE2015-1641!rtf
- Exploit-CVE2015-2545
- Exploit-SWF.bk
- JS/Exploit-Rigkit.c
- JS/Locky.m
- JS/Locky.n
- NSIS/ObfusRansom.d
- OSX/Komplex.a
- OSX/Komplex.b
- OSX/Komplex.c
- PWSZbot-FHN
- Ransom-O
- Ransomware-Locky.d!enc
- Ransomware-Locky.e!enc
- SWF/ExploitKit.n
- Trojan-CoinMiner
Changes for v12.1.0.2108 - v12.1.0.2126
- New Detections:
- BAT/Del
- JS/Exploit-Rigkit.c
- Enhanced Detections:
- Generic Trojan.i
- PWSZbot-FHN
- Ransom-Cerber
- Ransomware-Locky.e!enc
Changes for v12.1.0.2094 - v12.1.0.2099
- New Detections:
- Exploit-SWF.bk
- SWF/ExploitKit.l
- Enhanced Detections:
- Exploit-CVE2012-0158.aa
- Generic Trojan.i
- Generic Trojan.j
- Neutrino-ExploitKit.h
- Ransomware-Locky.d!enc
- SWF/ExploitKit.f
Changes for v12.1.0.2092 - v12.1.0.2094
- New Detections:
- Exploit-CVE2012-0158.ab
- Exploit-CVE2012-0158.ac
- Exploit-CVE2016-0189
- Exploit-CVE2016-3290
- Exploit-SWF.bj
- Generic Packed.s
- Generic Packed.t
- MSIL/Packed.a
- Trojan-PoweLike
- Trojan-PoweLike!bat
- Trojan-PoweLike!lnk
- Enhanced Detections:
- Exploit-CVE2012-0158.aa
- Generic Exploit.f
- Generic PWS.o
- Generic Trojan.i
- HTML/Neutrino.d
- HTML/Neutrino.e
- PWSZbot-FHN
- Ransom-O
- Ransomware-Locky.d!enc
- Stuxnet
- Trojan-Fareit.c
- VBS/Autorun.worm.k
Changes for v12.1.0.2089 - v12.1.0.2092
- New Detections:
- Exploit-CVE2012-0158.ab
- Exploit-CVE2012-0158.ac
- Exploit-CVE2016-0189
- Exploit-CVE2016-3290
- Exploit-SWF.bj
- Enhanced Detections:
- Exploit-CVE2012-0158.aa
- Generic Exploit.f
- Generic PWS.o
- Generic Trojan.i
- HTML/Neutrino.d
- HTML/Neutrino.e
- PWSZbot-FHN
- Ransom-O
- Ransomware-Locky.d!enc
- Stuxnet
- Trojan-Fareit.c
- VBS/Autorun.worm.k
Changes for v12.1.0.2088 - v12.1.0.2089
- New Detections:
- Exploit-CVE2012-0158.ab
- Exploit-CVE2012-0158.ac
- Exploit-CVE2016-0189
- Exploit-CVE2016-3290
- Enhanced Detections:
- Exploit-CVE2012-0158.aa
- Generic PWS.o
- HTML/Neutrino.d
- HTML/Neutrino.e
- PWSZbot-FHN
- Ransom-O
- Ransomware-Locky.d!enc
- Stuxnet
- Trojan-Fareit.c
- VBS/Autorun.worm.k
Changes for v12.1.0.2087 - v12.1.0.2088
- New Detections:
- Exploit-CVE2012-0158.ab
- Exploit-CVE2016-3290
- Enhanced Detections:
- Exploit-CVE2012-0158.aa
- HTML/Neutrino.e
- PWSZbot-FHN
- Ransom-O
- Ransomware-Locky.d!enc
- Stuxnet
- Trojan-Fareit.c
- VBS/Autorun.worm.k
Changes for v12.1.0.2086 - v12.1.0.2087
- New Detections:
- Exploit-CVE2016-3290
- Enhanced Detections:
- PWSZbot-FHN
- Ransom-O
- Ransomware-Locky.d!enc
- Stuxnet
- Trojan-Fareit.c
Changes for v12.1.0.2085 - v12.1.0.2086
- New Detections:
- Exploit-CVE2016-3290
- Enhanced Detections:
- PWSZbot-FHN
- Ransom-O
- Ransomware-Locky.d!enc
- Trojan-Fareit.c
Changes for v12.1.0.2082 - v12.1.0.2085
- New Detections:
- HTML/Neutrino.e
- Neutrino-ExploitKit.h
- Enhanced Detections:
- Generic Trojan.i
- HTML/Neutrino.c
- JS/Exploit-Blacole.ht
- PWSZbot-FHN
- Ransomware-Locky.e!enc
- SWF/ExploitKit.f
- SWF/ExploitKit.g
Changes for v12.1.0.2079 - v12.1.0.2082
- New Detections:
- Exploit-CVE2012-0158.aa
- Ransom-Cerber
- Enhanced Detections:
- Exploit-CVE2012-0158
- Exploit-CVE2012-0158.z
- Generic PWS.o
- Generic Packed.ace
- Generic Trojan.i
- Golroted.gen.f
- PWSZbot-FHN
- Ransomware-Locky.d!enc
- SWF/ExploitKit.j
- SWF/ExploitKit.k
Changes for v12.1.0.2076 - v12.1.0.2079
- New Detections:
- Exploit-CVE2012-0158.z
- Exploit-CVE2016-0099
- Generic Trojan.v
- SWF/ExploitKit.j
- SWF/ExploitKit.k
- Enhanced Detections:
- Generic Trojan.i
- PWSZbot-FHN
- Ransomware-Locky.d!enc
Changes for v12.1.0.2075 - v12.1.0.2076
- Enhanced Detections:
- PWSZbot-FHN
- Ransomware-Locky.d!enc
- W32/CoinMiner.d
Changes for v12.1.0.2072 - v12.1.0.2075
- New Detections:
- Neutrino-ExploitKit.d
- Neutrino-ExploitKit.e
- Neutrino-ExploitKit.f
- SWF/ExploitKit.f
- SWF/ExploitKit.g
- SWF/ExploitKit.h
- SWF/ExploitKit.i
- Trojan-FJHT!dat
- Enhanced Detections:
- HTML/Neutrino.b
- SWF/ExploitKit.c
- SWF/ExploitKit.d
- SWF/ExploitKit.e
Changes for v12.1.0.2052 - v12.1.0.2072
- New Detections:
- Exploit-CVE2016-3240
- Trojan-KillAV
- Enhanced Detections:
- PWSZbot-FHN
- Ransomware-Locky.d!enc
Changes for v12.1.0.2041 - v12.1.0.2052
- New Detections:
- Exploit-CVE2012-0158.s
- Exploit-CVE2012-0158.t
- Enhanced Detections:
- Exploit-SWF
- Exploit-SWF.bh
- Generic Trojan.z
- PWSZbot-FHN
- Ransom-O
Changes for v12.1.0.2037 - v12.1.0.2041
- New Detections:
- Exploit-CVE2014-6332.a
- Exploit-CVE2016-3199
- Exploit-CVE2016-3234
- HTML/Neutrino.a
- Enhanced Detections:
- Generic Trojan.i
Changes for v12.1.0.2034 - v12.1.0.2037
- New Detections:
- Generic Trojan.t
- Enhanced Detections:
- Exploit-CVE2015-2545.a
- Exploit-SWF.ba
- Exploit-SWF.bb
- Neutrino-ExploitKit.a
- Neutrino-ExploitKit.b
- Ransom-O
Changes for v12.1.0.2032 - v12.1.0.2034
- Enhanced Detections:
- Exploit-CVE2012-0158
- Generic Exploit-RTF.a
- Golroted.gen.a
- JS/Downloader
Changes for v12.1.0.2027 - v12.1.0.2032
- New Detections:
- Ransom-Exxroute!htm
- Enhanced Detections:
- Generic Trojan.i
- Generic Trojan.o
- JS/Exploit-Angler.n
- Ransom-O
- VBS/Downloader.cn
Changes for v12.1.0.2004 - v12.1.0.2006
- Enhanced Detections:
- Exploit-CVE2015-2545
- Exploit-CVE2016-0155
- Generic PWS.o
- Generic Packed.ace
- JS/Exploit
Changes for v12.1.0.2003 - v12.1.0.2004
- New Detections:
- Trojan-FIGN
- Trojan-FIKV
- Enhanced Detections:
- Exploit-CVE2015-2545
- Generic Trojan.j
- ZeroAccess!cfg
Changes for v12.1.0.2002 - v12.1.0.2003
- Enhanced Detections:
- Generic Trojan.i
Changes for v12.1.0.2001 - v12.1.0.2002
- New Detections:
- Golroted.gen.a
- JS/Exploit-Angler.p
- Trojan-AitInject.F
- VBS/Trojan-B
- Enhanced Detections:
- Corebot!mxr
- Exploit-SWF
- Generic Trojan.i
- Generic Trojan.z
- Ransom-O
- Trojan-Dridex
Changes for v12.1.0.1924 - v12.1.0.1945
- New Detections:
- Exploit-CVE2010-3333.o
- Enhanced Detections:
- Exploit-RTF
- JS/Exploit-Angler.a
- Malformed-PDF
- PHP/Ransom-CTB
- PWS-Zbot
Changes for v12.1.0.1919 - v12.1.0.1924
- Enhanced Detections:
- PWS-Zbot
Changes for v12.1.0.1912 - v12.1.0.1919
- New Detections:
- Ransomware-Locky
Changes for v12.1.0.1910 - v12.1.0.1912
- New Detections:
- JS/Exploit-Rigkit.b
- Enhanced Detections:
- Downloader-CJX!lnk
- Exploit-CVE2012-0158!rtf
- Exploit-SWF.ae
- Fareit!eml
- JS/Pinkslipbot
- ZeroAccess!cfg
Changes for v12.1.0.1904 - v12.1.0.1907
- Enhanced Detections:
- BAT/DelAll
- JS/Exploit-Angler
- PWS-Zbot
Changes for v12.1.0.1897 - v12.1.0.1904
- New Detections:
- Generic Packed.ace
- JS/Exploit!dam
- Enhanced Detections:
- Generic Trojan.i
- Java/Adwind
- W32/Pinkslipbot
Changes for v12.1.0.1894 - v12.1.0.1897
- Enhanced Detections:
- PWS-Dridex
Changes for v12.1.0.1866 - v12.1.0.1894
- New Detections:
- BAT/DelAll
- JS/Pinkslipbot
- W32/Pinkslipbot!job
- Enhanced Detections:
- Adware-Eorezo
- Generic Trojan.i
- Generic Trojan.j
- JS/Exploit-Angler
- Ransom-Tescrypt
- W32/CoinMiner.e
Changes for v12.1.0.1858 - v12.1.0.1866
- Enhanced Detections:
- Ransom-O
Changes for v12.1.0.1854 - v12.1.0.1858
- New Detections:
- Ransom-Node
- Enhanced Detections:
- Generic Trojan.j
Changes for v12.1.0.1853 - v12.1.0.1854
- New Detections:
- Exploit-CVE2015-6172!rtf
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Exploit-CVE2015-8651
Changes for v12.1.0.1852 - v12.1.0.1853
- New Detections:
- Exploit-CVE2015-2387
- Enhanced Detections:
- Generic Trojan.i
Changes for v12.1.0.1851 - v12.1.0.1852
- Enhanced Detections:
- Exploit-SWF
- Generic Trojan.i
- Generic Trojan.j
Changes for v12.1.0.1847 - v12.1.0.1851
- Enhanced Detections:
- Generic Trojan.j
- JS/Exploit-Blacole.ko
Changes for v12.1.0.1842 - v12.1.0.1847
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Exploit-CVE2015-2419
- Exploit-SWF.ar
- Generic Trojan.i
- Generic Trojan.j
- Ransom-Tescrypt
Changes for v12.1.0.1837 - v12.1.0.1842
- Enhanced Detections:
- Generic PWS.o
- Java/Adwind
Changes for v12.1.0.1832 - v12.1.0.1837
- Enhanced Detections:
- Generic PWS.o
- Generic Trojan.j
- Ransom-Tescrypt
- Trojan-Fareit.a
- W32/CoinMiner.d
Changes for v12.1.0.1796 - v12.1.0.1798
- New Detections:
- JS/Exploit-Angler.k
- Enhanced Detections:
- 1
- Exploit-MSExcel.r
- FakeAlert-AU
- FakeAlert-AntiVirusXP
- FakeAlert-SpyKiller
- Generic Exploit.p
- Generic Trojan.r
Changes for v12.1.0.1792 - v12.1.0.1796
- New Detections:
- Exploit-Axpergle!swf
- Trojan-Veil
- VBS/PWS-Banker.gen.gn
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Exploit-SWF
- Generic Downloader.z
- Generic PWS.o
- Generic Trojan.j
- Generic Trojan.o
- Generic Trojan.p
- Generic Trojan.r
- JS/Exploit-Angler.a
- PWS-Zbot
- Ransom-O
- W32/Autorun.worm.hm
- ZergRush
Changes for v12.1.0.1779 - v12.1.0.1780
- Enhanced Detections:
- Exploit-SWF.am
- Exploit-SWF.an
- W32/Autorun.worm.c
Changes for v12.1.0.1771 - v12.1.0.1779
- Enhanced Detections:
- Crossrider
- PWS-Zbot
Changes for v12.1.0.1764 - v12.1.0.1771
- Enhanced Detections:
- Exploit-SWF
- Generic Trojan.j
- Generic Trojan.o
- Java/Adwind
- PWS-Zbot
Changes for v12.1.0.1750 - v12.1.0.1753
- Enhanced Detections:
- Exploit-SWF.ae
- SWF/Exploit.b
Changes for v12.1.0.1744 - v12.1.0.1750
- New Detections:
- Generic Trojan.r
- Ransom-TeslaCrypt
- Enhanced Detections:
- JS/Bondat.c!lnk
- VBS/PWS-Banker.gen.gm
Changes for v12.1.0.1744 - v12.1.0.1748
- Enhanced Detections:
- Generic Exploit.n
- Generic Trojan.j
Changes for v12.1.0.1743 - v12.1.0.1744
- New Detections:
- JS/Bondat.c!lnk
- VBS/PWS-Banker.gen.gm
- Enhanced Detections:
- Adware-Eorezo
- Generic Trojan.j
Changes for v12.1.0.1741 - v12.1.0.1743
- New Detections:
- JS/Bondat.c!lnk
- VBS/PWS-Banker.gen.gm
- Enhanced Detections:
- Adware-Eorezo
- Generic Trojan.j
Changes for v12.1.0.1737 - v12.1.0.1741
- New Detections:
- VBS/PWS-Banker.gen.gl
- Enhanced Detections:
- Generic FakeAlert.n
- Generic PWS.o
- Generic Trojan.j
- Generic Trojan.o
- Java/Adwind
- Ransom-O
Changes for v12.1.0.1723 - v12.1.0.1737
- New Detections:
- SWF/Exploit.b
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Generic Trojan.j
- Generic Trojan.o
- Generic Trojan.p
- JS/Exploit-Blacole.ml
- Ransom-O
- VBS/Trojan-A
Changes for v12.1.0.1722 - v12.1.0.1723
- New Detections:
- Exploit-CVE2015-2486
- Enhanced Detections:
- Exploit-CVE2014-1761
- Generic Trojan.j
- Generic Trojan.o
Changes for v12.1.0.1721 - v12.1.0.1722
- New Detections:
- Exploit-CVE2012-0158!h
- Exploit-SWF.al
- Enhanced Detections:
- Generic Trojan.q
- JS/Exploit-Blacole.ld
Changes for v12.1.0.1716 - v12.1.0.1721
- New Detections:
- Exploit-CVE2015-2485
Changes for v12.1.0.1715 - v12.1.0.1716
- New Detections:
- Exploit-CVE2015-2546
- Miuref
- Enhanced Detections:
- Exploit-SWF
Changes for v12.1.0.1708 - v12.1.0.1715
- New Detections:
- Exploit-SWF.aj
- Exploit-SWF.ak
- Enhanced Detections:
- Exploit-SWF.ai
- Generic Trojan.q
- JS/Redirector
Changes for v12.1.0.1705 - v12.1.0.1708
- Enhanced Detections:
- Generic PWS.o
- Generic Trojan.j
Changes for v12.1.0.1704 - v12.1.0.1705
- Enhanced Detections:
- Exploit-SWF.ad
- Generic Trojan.j
- JS/Exploit-Angler.a
- Ransom-O
Changes for v12.1.0.1703 - v12.1.0.1704
- New Detections:
- RansomCTB-FAF
Changes for v12.1.0.1691 - v12.1.0.1698
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Generic Downloader.z
Changes for v12.1.0.1687 - v12.1.0.1691
- Enhanced Detections:
- Exploit-CVE2012-0158
- Exploit-CVE2015-2442
- Exploit-CVE2015-2502
- Ransom-O
Changes for v12.1.0.1684 - v12.1.0.1687
- New Detections:
- SWF/Exploit-CVE-2015-3043
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Exploit-CVE2015-0359
- Exploit-CVE2015-2450
- Exploit-CVE2015-2452
- Generic Exploit.q
- Generic PWS.o
- Java/Adwind
- Ransom-O
Changes for v12.1.0.1683 - v12.1.0.1684
- Enhanced Detections:
- Generic Trojan.j
Changes for v12.1.0.1682 - v12.1.0.1683
- New Detections:
- Exploit-CVE2015-2442
- Trojan-FGYD
- VBS/PWS-Banker.gen.gk
- Enhanced Detections:
- Generic Trojan.j
Changes for v12.1.0.1678 - v12.1.0.1682
- New Detections:
- Exploit-CVE-2015-3043
- Enhanced Detections:
- Generic Trojan.j
Changes for v12.1.0.1675 - v12.1.0.1678
- New Detections:
- Exploit-CVE2015-2450
- Exploit-CVE2015-2452
- Enhanced Detections:
- Exploit-CVE-2015-5122
- Generic PWS.o
Changes for v12.1.0.1674 - v12.1.0.1675
- New Detections:
- Exploit-CVE2015-2502
- Generic Trojan.q
- Enhanced Detections:
- FakeAlert-WinWebSec!env.h
Changes for v12.1.0.1671 - v12.1.0.1674
- Enhanced Detections:
- Generic Trojan.j
- Ransom-O
Changes for v12.1.0.1665 - v12.1.0.1671
- Enhanced Detections:
- Exploit-CVE2012-0158
- Exploit-CVE2012-0158!g
- Exploit-SWF.x
- W32/Autorun.worm.c
Changes for v12.1.0.1650 - v12.1.0.1665
- Enhanced Detections:
- JS/Exploit.b
- JS/Exploit.c
- SWF/Exploit-CVE-2015-5119.b
Changes for v12.1.0.1648 - v12.1.0.1650
- Enhanced Detections:
- Generic Trojan.j
- Java/Adwind
- SWF/Exploit-CVE-2015-5119.a
Changes for v12.1.0.1552 - v12.1.0.1553
- Enhanced Detections:
- Kovter
- Ransom-Posh
- Ransom-Posh.b
- TDSS.d
- Trojan-CTBLocker!env
Changes for v12.1.0.1551 - v12.1.0.1552
- New Detections:
- Generic.wd
- Generic.we
- Generic.wf
- Generic.wg
- W97/Downloader
- Enhanced Detections:
- W32/Autorun.worm.c
Changes for v12.1.0.1543 - v12.1.0.1551
- Enhanced Detections:
- 1
- Adware-Bprotect
- Adware-Bprotect.a
- Adware-Bprotect.b
- Generic PWS.o
- Kuluoz
- NTRootKit-K
- PWS-Zbot
- Trojan-Powelike
- Zeroaccess.reg!env
Changes for v12.1.0.1527 - v12.1.0.1543
- New Detections:
- JS/Exploit-Angler.i
- Enhanced Detections:
- JS/Redirector
- Ransom-O
Changes for v12.1.0.1526 - v12.1.0.1527
- New Detections:
- Kovter
- Enhanced Detections:
- Exploit-CVE2015-0311
- Exploit-CVE2015-1665
- Exploit-SWF.v
- Generic PWS.o
- JS/Exploit-Angler.g
- JS/Exploit-Angler.h
- JS/Exploit.h
- JS/Exploit.i
- Ransom-CTB
Changes for v12.1.0.1523 - v12.1.0.1526
- Enhanced Detections:
- Exploit-SWF.t
- Exploit-SWF.x
- Generic PWS.o
- Ransom-O
- SWF/Exploit-Anogre.b
- W32/Autorun.worm.c
Changes for v12.1.0.1514 - v12.1.0.1523
- New Detections:
- Exploit-CVE2012-0158!c
- Enhanced Detections:
- Generic PWS.o
Changes for v12.1.0.1507 - v12.1.0.1514
- New Detections:
- Generic.wb
- Generic.wc
- Enhanced Detections:
- Generic Trojan.i
- Generic.vz
- Generic.wb
- Ransom-O
Changes for v12.1.0.1504 - v12.1.0.1507
- New Detections:
- JS/Exploit-Angler.h
- Enhanced Detections:
- Generic PWS.o
- JS/Exploit-Angler.f
Changes for v12.1.0.1503 - v12.1.0.1504
- New Detections:
- Exploit-SWF.v
- JS/Exploit-Angler.g
- JS/Exploit.h
- JS/Exploit.i
- Enhanced Detections:
- Exploit-CVE2012-0158!b
- Generic PWS.o
Changes for v12.1.0.1498 - v12.1.0.1503
- Enhanced Detections:
- Kuluoz
- Ransom-O
Changes for v12.1.0.1495 - v12.1.0.1498
- New Detections:
- Exploit-SWF.y
- Enhanced Detections:
- Exploit-SWF.x
- Generic Trojan.p
- JS/Exploit-Angler.a
- JS/Exploit-Angler.e
- JS/Exploit-Angler.f
- Ransom-O
- Ransom-Tescrypt
- W32/Conficker.worm
- W32/Conficker.worm.gen.b
Changes for v12.1.0.1491 - v12.1.0.1495
- New Detections:
- Exploit-SWF.x
- Enhanced Detections:
- Generic Trojan.j
- Ransom-O
- Ransom-Tescrypt
Changes for v12.1.0.1471 - v12.1.0.1472
- New Detections:
- Exploit-CVE2015-1665
- Enhanced Detections:
- Exploit-CVE2014-1761
- Generic Trojan.o
- PWS-Dridex
Changes for v12.1.0.1441 - v12.1.0.1471
- Enhanced Detections:
- PWS-Dridex
- Ransom-Tescrypt
Changes for v12.1.0.1435 - v12.1.0.1441
- New Detections:
- Trojan-PowerShell
- Enhanced Detections:
- Exploit-CVE2012-0158.g
- Exploit-CVE2012-0158.j
- Exploit-SWF.p
- Exploit-SWF.q
- Generic Exploit.p
- Generic Trojan.i
- Generic.ux
- Generic.vt
- PWS-Dridex
Changes for v12.1.0.1430 - v12.1.0.1435
- New Detections:
- Generic.vt
- Enhanced Detections:
- FakeAlert-FHR
- Generic PWS.o
- Generic Trojan.n
- Generic.vm
- Generic.vt
- W32/Virut
Changes for v12.1.0.1423 - v12.1.0.1430
- New Detections:
- JS/Exploit-Angler.d
- Enhanced Detections:
- Generic.vi
- Generic.vm
Changes for v12.1.0.1412 - v12.1.0.1423
- New Detections:
- Generic.vo
- W32/NionSpy
- Enhanced Detections:
- Exploit-CVE2012-0158.g
- Exploit-CVE2012-0158.j
- Generic Trojan.i
- Generic.ux
Changes for v12.1.0.1411 - v12.1.0.1412
- New Detections:
- JS/Exploit.e
- W32/NionSpy
- Enhanced Detections:
- Exploit-CVE2012-0158.f
- Generic Exploit.g
- Generic.ux
- Generic.vn
Changes for v12.1.0.1408 - v12.1.0.1411
- New Detections:
- Exploit-CVE2012-0158.g
- Exploit-CVE2012-0158.h
- Exploit-CVE2012-0158.i
- PWS-ZBot.gen.avn
- Trojan-XSWKit
- W97M/Downloader.aen
- Enhanced Detections:
- Java/Adwind
- Ransom-O
- W32/Rimecud.gen.aw
Changes for v12.1.0.1405 - v12.1.0.1408
- New Detections:
- Exploit-CVE2012-0158.g
- Enhanced Detections:
- W32/Rimecud.gen.aw
- W97M/Downloader.aef
Changes for v12.1.0.1401 - v12.1.0.1405
- New Detections:
- Generic.vn
- W97M/Downloader.aef
- W97M/Downloader.aeg
- W97M/Downloader.aej
- W97M/Downloader.aek
- Enhanced Detections:
- Exploit-CVE2012-0158.d
- Exploit-CVE2012-0158.e
- Exploit-CVE2012-0158.f
- Exploit-CVE2015-0048
- Exploit-CVE2015-0313
Changes for v12.1.0.1396 - v12.1.0.1401
- New Detections:
- Exploit-CVE2012-0158.f
- Generic.vl
- W32/DocumentCrypt
- Enhanced Detections:
- Exploit-CVE2012-0158.b
- Exploit-CVE2012-0158.c
- Generic PWS.o
- Generic.ux
- Generic.vk
- W97M/Downloader.aee
Changes for v12.1.0.1392 - v12.1.0.1396
- New Detections:
- W97M/Downloader.aee
- Enhanced Detections:
- Generic.ux
- Generic.vk
- Java/Adwind
Changes for v12.1.0.1380 - v12.1.0.1392
- New Detections:
- Exploit-CVE2012-0158.d
- Exploit-CVE2012-0158.e
- W32/Ramnit!remnants
- W32/Ramnit!rtf
- W32/Ramnit!trace
- W32/Ramnit.a
- W32/Ramnit.a!htm
- W32/Ramnit.a!inf
- W32/Ramnit.a.dr
- W32/Ramnit.b
- W32/Ramnit.c
- W32/Ramnit.d
- W32/Ramnit.dr
- W32/Ramnit.f
- W32/Ramnit.g
- W32/Ramnit.gen.b
- W32/Ramnit.gen.c
- W32/Ramnit.h
- W32/Ramnit.i
- W32/Ramnit.j
- W32/Ramnit.k
- W32/Ramnit.l
- W32/Ramnit.m
- W32/Ramnit.n
- W97M/Dropper
- X97M/Dropper
- Enhanced Detections:
- Exploit-SWF.k
- Exploit-SWF.m
- Generic Exploit.f
- Generic.ux
- Generic.vk
- W32/Ramnit
- W32/Ramnit!remnants
- W32/Ramnit.a
- W32/Ramnit.a!htm
- W32/Ramnit.a.dr
- W32/Ramnit.dr
- X97M/Dropper
Changes for v12.1.0.1352 - v12.1.0.1380
- New Detections:
- Exploit-SWF.k
- Enhanced Detections:
- Generic Exploit.p
- Generic.ux
- Generic.vg
- Generic.vh
Changes for v12.1.0.1346 - v12.1.0.1352
- New Detections:
- Exploit-CVE2015-0044
- PWS-ZBot.gen.avm
- Enhanced Detections:
- Generic Exploit
- Generic.ux
Changes for v12.1.0.1336 - v12.1.0.1346
- New Detections:
- Trojan-Powelike
- Enhanced Detections:
- Generic PWS.o
- Generic.ux
- Generic.vh
Changes for v12.1.0.1328 - v12.1.0.1336
- Enhanced Detections:
- Generic.uw
- Generic.ux
- Ransom-O
Changes for v12.1.0.1323 - v12.1.0.1328
- Enhanced Detections:
- Exploit-CVE2014-0515
- Exploit-SWF.i
- Generic.ux
- Generic.vh
- PWS-ZBot.gen.aux
Changes for v12.1.0.1322 - v12.1.0.1323
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Exploit-CVE2014-1761
- Generic.ux
- Generic.vh
- Generic.vj
- PWS-Zbot.gen.anj
Changes for v12.1.0.1320 - v12.1.0.1322
- New Detections:
- Generic.vj
- PWS-FCAD
- PWS-Remora
- Enhanced Detections:
- Exploit-SWF.g
- Exploit-SWF.h
- Generic Downloader.z
- Generic.ux
- Generic.vh
- Generic.vj
Changes for v12.1.0.1316 - v12.1.0.1320
- New Detections:
- Exploit-CVE2015-0313
- Enhanced Detections:
- Exploit-CVE2012-0158
- Exploit-SWF.h
- Exploit-Shellcode.gen
- Generic Exploit.g
- Generic.sq
- Generic.vf
- TDSS.d
Changes for v12.1.0.1314 - v12.1.0.1315
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Generic.ux
- Generic.vi
Changes for v12.1.0.1307 - v12.1.0.1314
- New Detections:
- Exploit-SWF.h
- Exploit-Shellcode.gen
- Enhanced Detections:
- Generic.ux
- Generic.vi
Changes for v12.1.0.1303 - v12.1.0.1307
- New Detections:
- Adware-AddLyrics
- Adware-BProtect
- Adware-BSurf
- Adware-BetterInstaller
- Adware-BetterSurf
- Adware-Bprotect
- Adware-Bprotect.a
- Adware-Bprotect.b
- Adware-Bprotect.c
- Adware-DomaIQ
- Adware-Eorezo
- Adware-Hebogo
- Adware-Iffinity
- Adware-InstallQ
- Adware-MegaSearch
- Adware-MixiDJToolbar
- Adware-Monetizer
- Adware-NewNext
- Adware-OutBrowse
- Adware-PowerOffer
- Adware-SaveShare
- Adware-SweetIM
- Adware-iBryte
- Bat/Autorun.k
- Bat/Autorun.worm.aabi
- Bat/Autorun.worm.h
- Bat/Autorun.worm.ni
- Bat/Autorun.worm.zr
- Bat/Autorun.worm.zr!vbs
- Bat/Autorun.worm.zw
- Bat/Mumu.worm
- Bojan
- BrainInstall
- Cleanup
- Crossrider
- DirectDownminer
- DistTrack!sys
- Distromatic
- DomaIQ
- Downloader-BPJ.gen.a
- Downloader-FKW
- Downloader-FMA
- Downloader-FMB
- Downloader-FMJ
- DriverPack
- Encoded Executable
- Exploit-DcomRpc
- Exploit-DcomRpc.b
- Exploit-DcomRpc.dll
- Exploit-IFrame.gen.ah
- Exploit-IFrame.gen.ak
- Exploit-IFrame.gen.am
- Exploit-Lsass
- Exploit-Lsass.dll
- Exploit-MS04-011
- Exploit-MS04-011.gen
- Exploit-PDF!Blacole.dx
- Exploit-SWF!Blacole.dx
- Exploit-XMLhttp.d
- Exploit-XMLhttp.d.gen
- Exploit-XMLhttp.d.gen.b
- Exploit-XMLhttpd.d
- Exploit-XMLhttpd.gen.c
- FakeAlert.dx
- FreeKey
- GameEnix
- GameVance.gen.be
- GameVance.gen.bf
- Generic Malware.af!ats
- Generic Malware.ce!pec
- Generic Malware.ev!pec
- Generic.Dropped.a
- Generic.Miuref.dx
- Generic.Upatre.dx
- Generic.dam
- Generic.gl
- Generic.it
- Generic.iu
- Generic.iv
- Generic.iw
- Generic.ix
- Generic.iy
- Generic.iz
- Generic.ja
- Generic.jb
- Generic.jc
- Generic.jd
- Generic.je
- Generic.jf
- Generic.jg
- Generic.jh
- Generic.ji
- Generic.jj
- Generic.jk
- Generic.jl
- Generic.jm
- Generic.jn
- Generic.jo
- Generic.jp
- Generic.jq
- Generic.jr
- Generic.js
- Generic.jt
- Generic.ju
- Generic.jv
- Generic.jw
- Generic.jx
- Generic.jy
- Generic.jz
- Generic.ka
- Generic.kb
- Generic.kc
- Generic.kd
- Generic.ke
- Generic.kf
- Generic.kg
- Generic.kh
- Generic.ki
- Generic.kj
- Generic.kk
- Generic.kl
- Generic.km
- Generic.kn
- Generic.ko
- Generic.kp
- Generic.kq
- Generic.kr
- Generic.ks
- Generic.kt
- Generic.ku
- Generic.kv
- Generic.kw
- Generic.kx
- Generic.ky
- Generic.kz
- Generic.la
- Generic.lb
- Generic.lc
- Generic.ld
- Generic.le
- Generic.lf
- Generic.lg
- Generic.lh
- Generic.li
- Generic.lm
- Generic.ln
- Generic.lo
- Generic.lp
- Generic.lq
- Generic.lr
- Generic.ls
- Generic.lt
- Generic.lu
- Generic.lv
- Generic.lw
- Generic.lx
- Generic.ly
- Generic.lz
- Generic.ma
- Generic.mb
- Generic.mc
- Generic.md
- Generic.me
- Generic.mf
- Generic.mg
- Generic.mh
- Generic.mi
- Generic.mj
- Generic.mk
- Generic.ml
- Generic.mm
- Generic.mn
- Generic.mo
- Generic.mp
- Generic.mq
- Generic.mr
- Generic.ms
- Generic.mt
- Generic.mu
- Generic.mv
- Generic.mw
- Generic.mx
- Generic.my
- Generic.mz
- Generic.na
- Generic.nb
- Generic.nc
- Generic.nd
- Generic.ne
- Generic.nf
- Generic.ng
- Generic.nh
- Generic.ni
- Generic.nj
- Generic.nk
- Generic.nl
- Generic.nm
- Generic.nn
- Generic.no
- Generic.np
- Generic.nq
- Generic.nr
- Generic.ns
- Generic.nt
- Generic.nu
- Generic.nv
- Generic.nw
- Generic.nx
- Generic.ny
- Generic.nz
- Generic.oa
- Generic.ob
- Generic.oc
- Generic.od
- Generic.oe
- Generic.of
- Generic.og
- Generic.oh
- Generic.oi
- Generic.oj
- Generic.ok
- Generic.ol
- Generic.om
- Generic.on
- Generic.oo
- Generic.op
- Generic.oq
- Generic.or
- Generic.os
- Generic.ot
- Generic.ou
- Generic.ov
- Generic.ow
- Generic.ox
- Generic.oy
- Generic.oz
- Generic.pa
- Generic.pb
- Generic.pc
- Generic.pd
- Generic.pe
- Generic.pf
- Generic.pg
- Generic.ph
- Generic.pi
- Generic.pj
- Generic.pk
- Generic.pl
- Generic.pm
- Generic.pn
- Generic.po
- Generic.pp
- Generic.pq
- Generic.pr
- Generic.ps
- Generic.pt
- Generic.pu
- Generic.pw
- Generic.px
- Generic.py
- Generic.pz
- Generic.qa
- Generic.qb
- Generic.qc
- Generic.qd
- Generic.qe
- Generic.qf
- Generic.qg
- Generic.qi
- Generic.qj
- Generic.qk
- Generic.ql
- Generic.qm
- Generic.qn
- Generic.qo
- Generic.qp
- Generic.qq
- Generic.qr
- Generic.qs
- Generic.qt
- Generic.qu
- Generic.qv
- Generic.qw
- Generic.qx
- Generic.qy
- Generic.qz
- Generic.ra
- Generic.rb
- Generic.rc
- Generic.rd
- Generic.re
- Generic.rf
- Generic.rg
- Generic.rh
- Generic.ri
- Generic.rj
- Generic.rk
- Generic.rl
- Generic.rm
- Generic.rn
- Generic.ro
- Generic.rp
- Generic.rq
- Generic.rr
- Generic.rs
- Generic.rt
- Generic.ru
- Generic.rv
- Generic.rw
- Generic.rx
- Generic.ry
- Generic.rz
- Generic.sa
- Generic.sb
- Generic.sc
- Generic.sd
- Generic.se
- Generic.sg
- Generic.sh
- Generic.si
- Generic.sj
- Generic.sk
- Generic.sl
- Generic.sm
- Generic.sn
- Generic.so
- Generic.sp
- Generic.sq
- Generic.sr
- Generic.ss
- Generic.st
- Generic.su
- Generic.sv
- Generic.sw
- Generic.sx
- Generic.sy
- Generic.sz
- Generic.ta
- Generic.tb
- Generic.tc
- Generic.td
- Generic.te
- Generic.tf
- Generic.tg
- Generic.th
- Generic.ti
- Generic.tj
- Generic.tk
- Generic.tl
- Generic.tm
- Generic.tn
- Generic.to
- Generic.tp
- Generic.tq
- Generic.tr
- Generic.ts
- Generic.tt
- Generic.tu
- Generic.tv
- Generic.tw
- Generic.tx
- Generic.ty
- Generic.tz
- Generic.ua
- Generic.ub
- Generic.uc
- Generic.ud
- Generic.ue
- Generic.uf
- Generic.ug
- Generic.uh
- Generic.ui
- Generic.uj
- Generic.uk
- Generic.ul
- Generic.um
- Generic.un
- Generic.uo
- Generic.up
- Generic.uq
- Generic.ur
- Generic.us
- Generic.ut
- Generic.uu
- Generic.uv
- Generic.uw
- Generic.ux
- Generic.uy
- Generic.uz
- Generic.vb
- Generic.vc
- Generic.vd
- Generic.ve
- Generic.vf
- Generic.vg
- Generic.vh
- HTA/Autorun.worm.gh
- HTA/Autorun.worm.gh!lnk
- HTool-JSP/WebShell
- HTool-JSPRat
- HTool-RemoteCmd
- HackTool-ZBotBuilder
- HideWindow
- HideWindow.dll
- IRCbot.gen.ah
- InstallCore
- InstallMonster
- Installrex.dr
- Ividi
- Iwin
- JS/Autorun.worm.aabn
- JS/Autorun.worm.ci
- JS/Blacole.dx
- JS/Downloader-AUE
- JS/Downloader-FCV
- JS/IFrame.gen
- JS/IFrame.gen.a
- JS/IFrame.gen.h
- JS/Iframe.gen
- JS/PornPopup
- JS/Redirector.ad
- JS/Redirector.af
- JS/Redirector.an
- JS/Redirector.c
- JS/Wonka
- JV/Blacole.dx
- Joke-ArchSMS.f
- Katusha
- Keylog-FAE
- Keylog-SFY.dr
- Linkun
- Luckyleap
- Maxiget
- Mplug.gen.a
- OSX/Baoba
- PUP-FGB
- PUP-FGC
- PUP-FGE
- PWCrack-PWDump
- PWCrack-SQLRemote
- PWS-Zbot.dx
- PWS-Zbot.dx!rar
- PWS-Zbot.dx!zip
- Packsu
- PowerPack
- Ransom-FAC!lnk
- Ransom-FAD
- Ransom-FAE
- Ransom-FAF
- Ransom.dx
- Somoto-BetterInstaller
- Spyware-Nucleus
- Spyware-RemoteSpy
- Spyware-UltraKeyboard
- Suspicious Keygen!rar
- Tool-FaceHack
- Tool-NetCat
- Tool-ProcKill
- Tool-VPassDecode
- Toolbar-Browser
- Toolbar-Inbox
- Trojan-SkyHook
- UltraDownload
- Ultrarchive
- Upatre.dx!zip
- VBS/Autorun.bj
- VBS/Autorun.worm!zip
- VBS/Autorun.worm.aaay
- VBS/Autorun.worm.aaaz
- VBS/Autorun.worm.aaib
- VBS/Autorun.worm.aaic
- VBS/Autorun.worm.aau
- VBS/Autorun.worm.aav
- VBS/Autorun.worm.aaw
- VBS/Autorun.worm.aax
- VBS/Autorun.worm.au
- VBS/Autorun.worm.ay
- VBS/Autorun.worm.bdg
- VBS/Autorun.worm.bfo
- VBS/Autorun.worm.bgb
- VBS/Autorun.worm.bgc
- VBS/Autorun.worm.bi
- VBS/Autorun.worm.bj
- VBS/Autorun.worm.bs
- VBS/Autorun.worm.by
- VBS/Autorun.worm.ca
- VBS/Autorun.worm.cy
- VBS/Autorun.worm.dm
- VBS/Autorun.worm.dn
- VBS/Autorun.worm.dn!atr
- VBS/Autorun.worm.dn!txt
- VBS/Autorun.worm.dv
- VBS/Autorun.worm.dz
- VBS/Autorun.worm.en
- VBS/Autorun.worm.ew
- VBS/Autorun.worm.fu
- VBS/Autorun.worm.fz
- VBS/Autorun.worm.ga
- VBS/Autorun.worm.gb
- VBS/Autorun.worm.gc
- VBS/Autorun.worm.gd
- VBS/Autorun.worm.ge
- VBS/Autorun.worm.gf
- VBS/Autorun.worm.gg
- VBS/Autorun.worm.k
- VBS/Autorun.worm.k!bat
- VBS/Autorun.worm.k!lnk
- VBS/Autorun.worm.k!reg
- VBS/Autorun.worm.ni
- VBS/Autorun.worm.zd
- VBS/Autorun.worm.ze
- VBS/Autorun.worm.zl
- VBS/Autorun.worm.zn
- VBS/Autorun.worm.zo
- VBS/Autorun.worm.zo!lnk
- VBS/Autorun.worm.zs
- VBS/Autorun.worm.zy
- VBS/Autorun.worm.zz
- VBS/IE-Title
- W32/Anig.worm
- W32/Anig.worm.dll
- W32/Autorun
- W32/Autorun.Worm.aaeh
- W32/Autorun.Worm.aaeq
- W32/Autorun.fo
- W32/Autorun.worm
- W32/Autorun.worm!inf
- W32/Autorun.worm!ini
- W32/Autorun.worm!vbd
- W32/Autorun.worm.a
- W32/Autorun.worm.aa
- W32/Autorun.worm.aaa
- W32/Autorun.worm.aaab
- W32/Autorun.worm.aaac
- W32/Autorun.worm.aaad
- W32/Autorun.worm.aaae
- W32/Autorun.worm.aaaf
- W32/Autorun.worm.aaag
- W32/Autorun.worm.aaah
- W32/Autorun.worm.aaai
- W32/Autorun.worm.aaai!lnk
- W32/Autorun.worm.aaaj
- W32/Autorun.worm.aaak
- W32/Autorun.worm.aaal
- W32/Autorun.worm.aaam
- W32/Autorun.worm.aaan
- W32/Autorun.worm.aaao
- W32/Autorun.worm.aaap
- W32/Autorun.worm.aaaq
- W32/Autorun.worm.aaar
- W32/Autorun.worm.aaas
- W32/Autorun.worm.aaat
- W32/Autorun.worm.aaau
- W32/Autorun.worm.aaav
- W32/Autorun.worm.aaaw
- W32/Autorun.worm.aaaz
- W32/Autorun.worm.aab
- W32/Autorun.worm.aaba
- W32/Autorun.worm.aabb
- W32/Autorun.worm.aabc
- W32/Autorun.worm.aabd
- W32/Autorun.worm.aabe
- W32/Autorun.worm.aabf
- W32/Autorun.worm.aabg
- W32/Autorun.worm.aabh
- W32/Autorun.worm.aabi
- W32/Autorun.worm.aabj
- W32/Autorun.worm.aabk
- W32/Autorun.worm.aabl
- W32/Autorun.worm.aabl!inf
- W32/Autorun.worm.aabl!lnk
- W32/Autorun.worm.aabm
- W32/Autorun.worm.aabm!bat
- W32/Autorun.worm.aabm!reg
- W32/Autorun.worm.aabo
- W32/Autorun.worm.aabp
- W32/Autorun.worm.aabq
- W32/Autorun.worm.aabr
- W32/Autorun.worm.aabs
- W32/Autorun.worm.aabt
- W32/Autorun.worm.aabu
- W32/Autorun.worm.aabv
- W32/Autorun.worm.aabw
- W32/Autorun.worm.aaby
- W32/Autorun.worm.aabz
- W32/Autorun.worm.aac
- W32/Autorun.worm.aaca
- W32/Autorun.worm.aacb
- W32/Autorun.worm.aacc
- W32/Autorun.worm.aacd
- W32/Autorun.worm.aace
- W32/Autorun.worm.aacf
- W32/Autorun.worm.aacg
- W32/Autorun.worm.aach
- W32/Autorun.worm.aaci
- W32/Autorun.worm.aacj
- W32/Autorun.worm.aack
- W32/Autorun.worm.aacl
- W32/Autorun.worm.aacm
- W32/Autorun.worm.aacn
- W32/Autorun.worm.aaco
- W32/Autorun.worm.aacq
- W32/Autorun.worm.aacr
- W32/Autorun.worm.aacs
- W32/Autorun.worm.aacz
- W32/Autorun.worm.aad
- W32/Autorun.worm.aae
- W32/Autorun.worm.aaeb
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.aaem
- W32/Autorun.worm.aaen
- W32/Autorun.worm.aaeo
- W32/Autorun.worm.aaep
- W32/Autorun.worm.aaer
- W32/Autorun.worm.aaet
- W32/Autorun.worm.aaet!lnk
- W32/Autorun.worm.aaf
- W32/Autorun.worm.aag
- W32/Autorun.worm.aah
- W32/Autorun.worm.aai
- W32/Autorun.worm.aaj
- W32/Autorun.worm.aaj!inf
- W32/Autorun.worm.aak
- W32/Autorun.worm.aal
- W32/Autorun.worm.aam
- W32/Autorun.worm.aan
- W32/Autorun.worm.aao
- W32/Autorun.worm.aap
- W32/Autorun.worm.aaq
- W32/Autorun.worm.aar
- W32/Autorun.worm.aas
- W32/Autorun.worm.aat
- W32/Autorun.worm.aau
- W32/Autorun.worm.aau!env
- W32/Autorun.worm.aaw
- W32/Autorun.worm.aax
- W32/Autorun.worm.aay
- W32/Autorun.worm.aaz
- W32/Autorun.worm.ab
- W32/Autorun.worm.aba
- W32/Autorun.worm.abb
- W32/Autorun.worm.ac
- W32/Autorun.worm.ad
- W32/Autorun.worm.ae
- W32/Autorun.worm.af
- W32/Autorun.worm.ag
- W32/Autorun.worm.ai
- W32/Autorun.worm.aj
- W32/Autorun.worm.ak
- W32/Autorun.worm.al
- W32/Autorun.worm.am
- W32/Autorun.worm.an
- W32/Autorun.worm.ao
- W32/Autorun.worm.ap
- W32/Autorun.worm.aq
- W32/Autorun.worm.ar
- W32/Autorun.worm.as
- W32/Autorun.worm.at
- W32/Autorun.worm.av
- W32/Autorun.worm.aw
- W32/Autorun.worm.ax
- W32/Autorun.worm.az
- W32/Autorun.worm.b
- W32/Autorun.worm.b.cfg
- W32/Autorun.worm.ba
- W32/Autorun.worm.bb
- W32/Autorun.worm.bba
- W32/Autorun.worm.bbb
- W32/Autorun.worm.bbc
- W32/Autorun.worm.bbd
- W32/Autorun.worm.bbe
- W32/Autorun.worm.bbf
- W32/Autorun.worm.bbg
- W32/Autorun.worm.bbh
- W32/Autorun.worm.bbh!bat
- W32/Autorun.worm.bbh!job
- W32/Autorun.worm.bbi
- W32/Autorun.worm.bbj
- W32/Autorun.worm.bbk
- W32/Autorun.worm.bbl
- W32/Autorun.worm.bbm
- W32/Autorun.worm.bbn
- W32/Autorun.worm.bbo
- W32/Autorun.worm.bbp
- W32/Autorun.worm.bbq
- W32/Autorun.worm.bbr
- W32/Autorun.worm.bbs
- W32/Autorun.worm.bbt
- W32/Autorun.worm.bbu
- W32/Autorun.worm.bbv
- W32/Autorun.worm.bbw
- W32/Autorun.worm.bbx
- W32/Autorun.worm.bby
- W32/Autorun.worm.bbz
- W32/Autorun.worm.bc
- W32/Autorun.worm.bca
- W32/Autorun.worm.bcb
- W32/Autorun.worm.bcc
- W32/Autorun.worm.bcd
- W32/Autorun.worm.bce
- W32/Autorun.worm.bcf
- W32/Autorun.worm.bcg
- W32/Autorun.worm.bch
- W32/Autorun.worm.bci
- W32/Autorun.worm.bcj
- W32/Autorun.worm.bck
- W32/Autorun.worm.bcl
- W32/Autorun.worm.bcm
- W32/Autorun.worm.bcn
- W32/Autorun.worm.bco
- W32/Autorun.worm.bcp
- W32/Autorun.worm.bcq
- W32/Autorun.worm.bcr
- W32/Autorun.worm.bcs
- W32/Autorun.worm.bct!inf
- W32/Autorun.worm.bcu!inf
- W32/Autorun.worm.bcv
- W32/Autorun.worm.bcw
- W32/Autorun.worm.bcx
- W32/Autorun.worm.bcy
- W32/Autorun.worm.bcz
- W32/Autorun.worm.bd
- W32/Autorun.worm.bda
- W32/Autorun.worm.bdb
- W32/Autorun.worm.bdc!vbs
- W32/Autorun.worm.bdd
- W32/Autorun.worm.bde
- W32/Autorun.worm.bdf
- W32/Autorun.worm.bdh!atr
- W32/Autorun.worm.bdi
- W32/Autorun.worm.bdj
- W32/Autorun.worm.bdk
- W32/Autorun.worm.bdl
- W32/Autorun.worm.bdm!atr
- W32/Autorun.worm.bdn
- W32/Autorun.worm.bdo
- W32/Autorun.worm.bdp
- W32/Autorun.worm.bdq
- W32/Autorun.worm.bdq!atr
- W32/Autorun.worm.bdq!au3
- W32/Autorun.worm.bdr
- W32/Autorun.worm.bds
- W32/Autorun.worm.bdt
- W32/Autorun.worm.bdu
- W32/Autorun.worm.bdv
- W32/Autorun.worm.bdw
- W32/Autorun.worm.bdx
- W32/Autorun.worm.bdy
- W32/Autorun.worm.bdz
- W32/Autorun.worm.be
- W32/Autorun.worm.bea
- W32/Autorun.worm.beb
- W32/Autorun.worm.bec
- W32/Autorun.worm.bed
- W32/Autorun.worm.bee
- W32/Autorun.worm.bef
- W32/Autorun.worm.beg
- W32/Autorun.worm.beh
- W32/Autorun.worm.bei
- W32/Autorun.worm.bej
- W32/Autorun.worm.bek
- W32/Autorun.worm.bel
- W32/Autorun.worm.bem
- W32/Autorun.worm.ben
- W32/Autorun.worm.beo
- W32/Autorun.worm.bep
- W32/Autorun.worm.bep!bat
- W32/Autorun.worm.beq
- W32/Autorun.worm.ber
- W32/Autorun.worm.bes
- W32/Autorun.worm.bet
- W32/Autorun.worm.beu
- W32/Autorun.worm.bev
- W32/Autorun.worm.bew
- W32/Autorun.worm.bex
- W32/Autorun.worm.bey
- W32/Autorun.worm.bez!atr
- W32/Autorun.worm.bf
- W32/Autorun.worm.bfa
- W32/Autorun.worm.bfb
- W32/Autorun.worm.bfc
- W32/Autorun.worm.bfd
- W32/Autorun.worm.bfe
- W32/Autorun.worm.bff
- W32/Autorun.worm.bfg
- W32/Autorun.worm.bfh
- W32/Autorun.worm.bfi
- W32/Autorun.worm.bfj
- W32/Autorun.worm.bfk
- W32/Autorun.worm.bfl
- W32/Autorun.worm.bfm
- W32/Autorun.worm.bfn
- W32/Autorun.worm.bfp
- W32/Autorun.worm.bfq
- W32/Autorun.worm.bfr
- W32/Autorun.worm.bfs
- W32/Autorun.worm.bft
- W32/Autorun.worm.bfu
- W32/Autorun.worm.bfv
- W32/Autorun.worm.bfw
- W32/Autorun.worm.bfx
- W32/Autorun.worm.bfy
- W32/Autorun.worm.bfz
- W32/Autorun.worm.bg
- W32/Autorun.worm.bga
- W32/Autorun.worm.bgc
- W32/Autorun.worm.bgd
- W32/Autorun.worm.bge
- W32/Autorun.worm.bgf
- W32/Autorun.worm.bgg
- W32/Autorun.worm.bgh
- W32/Autorun.worm.bgi
- W32/Autorun.worm.bgj
- W32/Autorun.worm.bgk
- W32/Autorun.worm.bgl
- W32/Autorun.worm.bh
- W32/Autorun.worm.bk
- W32/Autorun.worm.bl
- W32/Autorun.worm.bm
- W32/Autorun.worm.bn
- W32/Autorun.worm.bo
- W32/Autorun.worm.bp
- W32/Autorun.worm.bp!reg
- W32/Autorun.worm.bq
- W32/Autorun.worm.br
- W32/Autorun.worm.bt
- W32/Autorun.worm.bw
- W32/Autorun.worm.bx
- W32/Autorun.worm.bx!atr
- W32/Autorun.worm.bx!inf
- W32/Autorun.worm.bx.gen
- W32/Autorun.worm.by
- W32/Autorun.worm.by!env
- W32/Autorun.worm.bz
- W32/Autorun.worm.c
- W32/Autorun.worm.c!lnk
- W32/Autorun.worm.cb
- W32/Autorun.worm.cb.dr
- W32/Autorun.worm.cc
- W32/Autorun.worm.cd
- W32/Autorun.worm.ce
- W32/Autorun.worm.cf
- W32/Autorun.worm.cg
- W32/Autorun.worm.ch
- W32/Autorun.worm.cj
- W32/Autorun.worm.ck
- W32/Autorun.worm.cm
- W32/Autorun.worm.cn
- W32/Autorun.worm.co
- W32/Autorun.worm.cp
- W32/Autorun.worm.cp!bat
- W32/Autorun.worm.cq
- W32/Autorun.worm.cr
- W32/Autorun.worm.cs
- W32/Autorun.worm.cs!ini
- W32/Autorun.worm.ct
- W32/Autorun.worm.cu
- W32/Autorun.worm.cv
- W32/Autorun.worm.cw
- W32/Autorun.worm.cx
- W32/Autorun.worm.cz
- W32/Autorun.worm.d
- W32/Autorun.worm.da
- W32/Autorun.worm.db
- W32/Autorun.worm.dc
- W32/Autorun.worm.dd
- W32/Autorun.worm.dd!inf
- W32/Autorun.worm.de
- W32/Autorun.worm.df
- W32/Autorun.worm.dg
- W32/Autorun.worm.dh
- W32/Autorun.worm.di
- W32/Autorun.worm.dj
- W32/Autorun.worm.dk
- W32/Autorun.worm.dl
- W32/Autorun.worm.dn
- W32/Autorun.worm.do
- W32/Autorun.worm.dp
- W32/Autorun.worm.dp!lnk
- W32/Autorun.worm.dq
- W32/Autorun.worm.ds
- W32/Autorun.worm.dt
- W32/Autorun.worm.du
- W32/Autorun.worm.dw
- W32/Autorun.worm.dx
- W32/Autorun.worm.dy
- W32/Autorun.worm.e
- W32/Autorun.worm.ea
- W32/Autorun.worm.eb
- W32/Autorun.worm.ec
- W32/Autorun.worm.ed
- W32/Autorun.worm.ef
- W32/Autorun.worm.eg
- W32/Autorun.worm.ei
- W32/Autorun.worm.ej
- W32/Autorun.worm.ek
- W32/Autorun.worm.el
- W32/Autorun.worm.em
- W32/Autorun.worm.eo
- W32/Autorun.worm.ep
- W32/Autorun.worm.eq
- W32/Autorun.worm.er
- W32/Autorun.worm.es
- W32/Autorun.worm.et
- W32/Autorun.worm.eu
- W32/Autorun.worm.eu!bat
- W32/Autorun.worm.eu!lnk
- W32/Autorun.worm.ev
- W32/Autorun.worm.ex
- W32/Autorun.worm.ey
- W32/Autorun.worm.ez
- W32/Autorun.worm.f
- W32/Autorun.worm.fa
- W32/Autorun.worm.fb
- W32/Autorun.worm.fc
- W32/Autorun.worm.fc!bat
- W32/Autorun.worm.fd
- W32/Autorun.worm.fe
- W32/Autorun.worm.ff
- W32/Autorun.worm.fg
- W32/Autorun.worm.fh
- W32/Autorun.worm.fi
- W32/Autorun.worm.fj
- W32/Autorun.worm.fk
- W32/Autorun.worm.fl
- W32/Autorun.worm.fm
- W32/Autorun.worm.fn
- W32/Autorun.worm.fp
- W32/Autorun.worm.fq
- W32/Autorun.worm.fr
- W32/Autorun.worm.fs
- W32/Autorun.worm.ft
- W32/Autorun.worm.fu
- W32/Autorun.worm.fv
- W32/Autorun.worm.fw
- W32/Autorun.worm.fx
- W32/Autorun.worm.fy
- W32/Autorun.worm.fz
- W32/Autorun.worm.g
- W32/Autorun.worm.ga
- W32/Autorun.worm.gb
- W32/Autorun.worm.gc
- W32/Autorun.worm.gd
- W32/Autorun.worm.ge
- W32/Autorun.worm.gen!job
- W32/Autorun.worm.gen.cl
- W32/Autorun.worm.gen.za
- W32/Autorun.worm.gen.zb
- W32/Autorun.worm.gf
- W32/Autorun.worm.gg
- W32/Autorun.worm.gi
- W32/Autorun.worm.gj
- W32/Autorun.worm.gk
- W32/Autorun.worm.gl
- W32/Autorun.worm.gm
- W32/Autorun.worm.gn
- W32/Autorun.worm.go
- W32/Autorun.worm.gp
- W32/Autorun.worm.gq
- W32/Autorun.worm.gr
- W32/Autorun.worm.gs
- W32/Autorun.worm.gt
- W32/Autorun.worm.gu
- W32/Autorun.worm.gv
- W32/Autorun.worm.gw
- W32/Autorun.worm.gx
- W32/Autorun.worm.gy
- W32/Autorun.worm.h
- W32/Autorun.worm.h!env
- W32/Autorun.worm.h!lnk
- W32/Autorun.worm.hm
- W32/Autorun.worm.i
- W32/Autorun.worm.j
- W32/Autorun.worm.k
- W32/Autorun.worm.l
- W32/Autorun.worm.m
- W32/Autorun.worm.n
- W32/Autorun.worm.o
- W32/Autorun.worm.p
- W32/Autorun.worm.q
- W32/Autorun.worm.r
- W32/Autorun.worm.remmants
- W32/Autorun.worm.s
- W32/Autorun.worm.t
- W32/Autorun.worm.u
- W32/Autorun.worm.v
- W32/Autorun.worm.v!bat
- W32/Autorun.worm.w
- W32/Autorun.worm.x
- W32/Autorun.worm.y
- W32/Autorun.worm.z
- W32/Autorun.worm.zc
- W32/Autorun.worm.zf
- W32/Autorun.worm.zf.gen
- W32/Autorun.worm.zg
- W32/Autorun.worm.zi
- W32/Autorun.worm.zj
- W32/Autorun.worm.zk
- W32/Autorun.worm.zm
- W32/Autorun.worm.zp
- W32/Autorun.worm.zq
- W32/Autorun.worm.zs
- W32/Autorun.worm.zt
- W32/Autorun.worm.zu
- W32/Autorun.worm.zu.dr
- W32/Autorun.worm.zv
- W32/Autorun.worm.zw
- W32/Autorun.worm.zw!inf
- W32/Autorun.worm.zx
- W32/Autorun.worm.zz
- W32/Autorun.worm.zza
- W32/Autorun.worm.zzb
- W32/Autorun.worm.zzc
- W32/Autorun.worm.zzd
- W32/Autorun.worm.zze
- W32/Autorun.worm.zze!bat
- W32/Autorun.worm.zze.dr
- W32/Autorun.worm.zzf
- W32/Autorun.worm.zzg
- W32/Autorun.worm.zzh
- W32/Autorun.worm.zzi
- W32/Autorun.worm.zzj
- W32/Autorun.worm.zzk
- W32/Autorun.worm.zzl
- W32/Autorun.worm.zzm
- W32/Autorun.worm.zzn
- W32/Autorun.worm.zzo
- W32/Autorun.worm.zzp
- W32/Autorun.worm.zzq
- W32/Autorun.worm.zzr
- W32/Autorun.worm.zzs
- W32/Autorun.worm.zzt
- W32/Autorun.worm.zzu
- W32/Autorun.worm.zzv
- W32/Autorun.worm.zzw
- W32/Autorun.worm.zzx
- W32/Autorun.worm.zzz
- W32/Bagle
- W32/Bagle!eml.gen
- W32/Bagle!pwdzip
- W32/Bagle.ad!src
- W32/Bagle.dldr
- W32/Bagle.dll.dr
- W32/Bagle.eml
- W32/Bagle.fb!pwdzip
- W32/Bagle.fc!pwdzip
- W32/Bagle.fd!pwdzip
- W32/Bagle.fe!pwdzip
- W32/Bagle.fm.dldr
- W32/Bagle.gen
- W32/Bagle.gen@MM
- W32/Bagle@MM!cpl
- W32/Blaster.worm
- W32/Blaster.worm.k
- W32/Bropia.worm
- W32/Bugbear
- W32/Bugbear.a.dam
- W32/Bugbear.b!data
- W32/Bugbear.b.dam
- W32/Bugbear.gen@MM
- W32/Bugbear.h@MM
- W32/Bugbear@MM
- W32/Conficker.sys
- W32/Conficker.worm
- W32/Conficker.worm!inf
- W32/Conficker.worm!job
- W32/Conficker.worm.dr
- W32/Conficker.worm.gen.a
- W32/Conficker.worm.gen.b
- W32/Conficker.worm.gen.c
- W32/Conficker.worm.gen.d
- W32/Conficker.worm.gen.e
- W32/Deborm.worm.ah
- W32/Deborm.worm.gen
- W32/Doomjuice.worm
- W32/Dumaru
- W32/Dumaru.ad@MM
- W32/Dumaru.al.dll
- W32/Dumaru.dll
- W32/Dumaru.eml
- W32/Dumaru.gen
- W32/Dumaru.gen@MM
- W32/Dumaru.w.gen
- W32/Elkern.cav
- W32/Elkern.cav.c
- W32/Elkern.cav.c.dam
- W32/Expiro.gen.o
- W32/Expiro.gen.p
- W32/Expiro.gen.r
- W32/Expiro.gen.ra
- W32/Fizzer
- W32/Fizzer.dll
- W32/Fujacks!htm
- W32/FunLove
- W32/FunLove.apd
- W32/FunLove.dam
- W32/Gaobot.worm
- W32/Generic.worm!irc
- W32/Generic.worm.aa
- W32/Generic.worm.ab
- W32/Generic.worm.ac
- W32/Generic.worm.ad
- W32/Generic.worm.ae
- W32/Generic.worm.af
- W32/Generic.worm.ag
- W32/Generic.worm.h
- W32/Generic.worm.i
- W32/Generic.worm.j
- W32/Generic.x
- W32/Generic.y
- W32/Generic.z
- W32/Harwig.worm
- W32/IRCBot
- W32/IRCBot.worm
- W32/IRCBot.worm.gen.ai
- W32/IRCbot.gen.aa
- W32/IRCbot.gen.ab
- W32/IRCbot.gen.ac
- W32/IRCbot.gen.ad
- W32/IRCbot.gen.ae
- W32/IRCbot.gen.af
- W32/IRCbot.gen.ai
- W32/IRCbot.gen.aj
- W32/IRCbot.worm
- W32/IRCbot.worm.dll
- W32/IRCbot.worm.gen.aj
- W32/IRCbot.worm.gen.al
- W32/IRCbot.worm.gen.am
- W32/IRCbot.worm.gen.an
- W32/Katusha
- W32/Klez
- W32/Klez.dam
- W32/Klez.eml
- W32/Klez.gen.b@MM
- W32/Klez.rar
- W32/Koobface.worm
- W32/Koobface.worm!env
- W32/Koobface.worm!env.b
- W32/Koobface.worm!env.c
- W32/Koobface.worm!env.d
- W32/Koobface.worm.as
- W32/Koobface.worm.dl
- W32/Koobface.worm.gen
- W32/Koobface.worm.gen!dll
- W32/Koobface.worm.gen.aa
- W32/Koobface.worm.gen.ab
- W32/Koobface.worm.gen.ac
- W32/Koobface.worm.gen.ad
- W32/Koobface.worm.gen.ae
- W32/Koobface.worm.gen.af
- W32/Koobface.worm.gen.ag
- W32/Koobface.worm.gen.ah
- W32/Koobface.worm.gen.ai
- W32/Koobface.worm.gen.aj
- W32/Koobface.worm.gen.ak
- W32/Koobface.worm.gen.al
- W32/Koobface.worm.gen.am
- W32/Koobface.worm.gen.an
- W32/Koobface.worm.gen.ao
- W32/Koobface.worm.gen.ap
- W32/Koobface.worm.gen.aq
- W32/Koobface.worm.gen.at
- W32/Koobface.worm.gen.au
- W32/Koobface.worm.gen.av
- W32/Koobface.worm.gen.aw
- W32/Koobface.worm.gen.aw!dll
- W32/Koobface.worm.gen.aw!sys
- W32/Koobface.worm.gen.ax!dll
- W32/Koobface.worm.gen.ax!sys
- W32/Koobface.worm.gen.ay!sys
- W32/Koobface.worm.gen.az!dll
- W32/Koobface.worm.gen.az!sys
- W32/Koobface.worm.gen.b
- W32/Koobface.worm.gen.ba
- W32/Koobface.worm.gen.bb!sys
- W32/Koobface.worm.gen.bc
- W32/Koobface.worm.gen.bd
- W32/Koobface.worm.gen.be
- W32/Koobface.worm.gen.be.dr
- W32/Koobface.worm.gen.bf
- W32/Koobface.worm.gen.bg
- W32/Koobface.worm.gen.bh
- W32/Koobface.worm.gen.bi
- W32/Koobface.worm.gen.bj
- W32/Koobface.worm.gen.bk
- W32/Koobface.worm.gen.bl
- W32/Koobface.worm.gen.c
- W32/Koobface.worm.gen.d
- W32/Koobface.worm.gen.e
- W32/Koobface.worm.gen.f
- W32/Koobface.worm.gen.g
- W32/Koobface.worm.gen.h
- W32/Koobface.worm.gen.i
- W32/Koobface.worm.gen.j
- W32/Koobface.worm.gen.k
- W32/Koobface.worm.gen.l
- W32/Koobface.worm.gen.m
- W32/Koobface.worm.gen.n
- W32/Koobface.worm.gen.o
- W32/Koobface.worm.gen.p
- W32/Koobface.worm.gen.q
- W32/Koobface.worm.gen.r
- W32/Koobface.worm.gen.s
- W32/Koobface.worm.gen.t
- W32/Koobface.worm.gen.u
- W32/Koobface.worm.gen.v
- W32/Koobface.worm.gen.w
- W32/Koobface.worm.gen.x
- W32/Koobface.worm.gen.y
- W32/Koobface.worm.gen.z
- W32/Koobface.worm.gen.z2
- W32/Korgo.worm
- W32/Korgo.worm.ak
- W32/Lirva
- W32/Lirva.c.htm
- W32/Lirva.eml
- W32/Lirva.gen@MM
- W32/Lirva.htm
- W32/Lirva.txt
- W32/Lovgate
- W32/Lovgate.dam
- W32/Mimail
- W32/Mimail.c@MM
- W32/Mimail.i!data
- W32/MoFei.worm
- W32/MoFei.worm.dr
- W32/Morto
- W32/Morto!dat
- W32/Morto.a
- W32/Morto.dll
- W32/Morto.dll.a
- W32/Morto.dll.b
- W32/Morto.dll.c
- W32/Morto.dll.d
- W32/Morto.dll.e
- W32/Mumu.b.worm
- W32/MyWife
- W32/MyWife.dll
- W32/MyWife@MM
- W32/Mydoom
- W32/Mydoom!bat
- W32/Mydoom!ftp
- W32/Mydoom.b!hosts
- W32/Mydoom.dam
- W32/Mydoom.t.dll
- W32/Mytob
- W32/Mytob.gen@MM
- W32/Mytob.worm
- W32/Nachi!tftpd
- W32/Nachi.worm
- W32/Netsky
- W32/Netsky.af@MM
- W32/Nimda
- W32/Nimda.dam
- W32/Nimda.eml
- W32/Nimda.gen@MM
- W32/Nimda.htm
- W32/Nuwar.dam
- W32/Nuwar.gen.a@mm
- W32/Nuwar.gen.b@mm
- W32/Nuwar.sys
- W32/Nuwar@MM
- W32/Nuwar@MM!rar
- W32/Nuwar@mm
- W32/Pate
- W32/Pate!dam
- W32/Pate!remnants
- W32/Pate.dam
- W32/Pate.dr
- W32/Pift
- W32/Pift.dr
- W32/Polip
- W32/Polybot
- W32/Polybot.bat
- W32/Ramnit.e
- W32/Rimecud
- W32/Rimecud!env.a
- W32/Rimecud!env.b
- W32/Rimecud!env.c
- W32/Rimecud!env.d
- W32/Rimecud!env.e
- W32/Rimecud!inf
- W32/Rimecud.gen.aa
- W32/Rimecud.gen.ac
- W32/Rimecud.gen.ad
- W32/Rimecud.gen.ae
- W32/Rimecud.gen.af
- W32/Rimecud.gen.ag
- W32/Rimecud.gen.ah
- W32/Rimecud.gen.ai
- W32/Rimecud.gen.aj
- W32/Rimecud.gen.ak
- W32/Rimecud.gen.al
- W32/Rimecud.gen.am
- W32/Rimecud.gen.an
- W32/Rimecud.gen.ao
- W32/Rimecud.gen.ap
- W32/Rimecud.gen.aq
- W32/Rimecud.gen.ar
- W32/Rimecud.gen.as
- W32/Rimecud.gen.at
- W32/Rimecud.gen.au
- W32/Rimecud.gen.av
- W32/Rimecud.gen.aw
- W32/Rimecud.gen.ax
- W32/Rimecud.gen.ay
- W32/Rimecud.gen.ba
- W32/Rimecud.gen.bb
- W32/Rimecud.gen.bc
- W32/Rimecud.gen.bd
- W32/Rimecud.gen.be
- W32/Rimecud.gen.bf
- W32/Rimecud.gen.bg
- W32/Rimecud.gen.bh
- W32/Rimecud.gen.bi
- W32/Rimecud.gen.bj
- W32/Rimecud.gen.bk
- W32/Rimecud.gen.bl
- W32/Rimecud.gen.bm
- W32/Rimecud.gen.bn
- W32/Rimecud.gen.bo
- W32/Rimecud.gen.bp
- W32/Rimecud.gen.bq
- W32/Rimecud.gen.br
- W32/Rimecud.gen.bs
- W32/Rimecud.gen.bt
- W32/Rimecud.gen.bu
- W32/Rimecud.gen.bv
- W32/Rimecud.gen.bw
- W32/Rimecud.gen.bx
- W32/Rimecud.gen.by
- W32/Rimecud.gen.bz
- W32/Rimecud.gen.c
- W32/Rimecud.gen.ca
- W32/Rimecud.gen.cb
- W32/Rimecud.gen.cc
- W32/Rimecud.gen.cd
- W32/Rimecud.gen.ce
- W32/Rimecud.gen.cf
- W32/Rimecud.gen.cg
- W32/Rimecud.gen.ch
- W32/Rimecud.gen.ci
- W32/Rimecud.gen.cj
- W32/Rimecud.gen.ck
- W32/Rimecud.gen.cl
- W32/Rimecud.gen.cm
- W32/Rimecud.gen.cn
- W32/Rimecud.gen.co
- W32/Rimecud.gen.cp
- W32/Rimecud.gen.cq
- W32/Rimecud.gen.cr
- W32/Rimecud.gen.cs
- W32/Rimecud.gen.ct
- W32/Rimecud.gen.cu
- W32/Rimecud.gen.cv
- W32/Rimecud.gen.cw
- W32/Rimecud.gen.cx
- W32/Rimecud.gen.cy
- W32/Rimecud.gen.cz
- W32/Rimecud.gen.d
- W32/Rimecud.gen.da
- W32/Rimecud.gen.db
- W32/Rimecud.gen.dc
- W32/Rimecud.gen.dd
- W32/Rimecud.gen.de
- W32/Rimecud.gen.df
- W32/Rimecud.gen.dg
- W32/Rimecud.gen.dh
- W32/Rimecud.gen.di
- W32/Rimecud.gen.dj
- W32/Rimecud.gen.dk
- W32/Rimecud.gen.dl
- W32/Rimecud.gen.dm
- W32/Rimecud.gen.dn
- W32/Rimecud.gen.do
- W32/Rimecud.gen.dp
- W32/Rimecud.gen.dq
- W32/Rimecud.gen.e
- W32/Rimecud.gen.f
- W32/Rimecud.gen.g
- W32/Rimecud.gen.h
- W32/Rimecud.gen.i
- W32/Rimecud.gen.j
- W32/Rimecud.gen.k
- W32/Rimecud.gen.l
- W32/Rimecud.gen.m
- W32/Rimecud.gen.n
- W32/Rimecud.gen.o
- W32/Rimecud.gen.p
- W32/Rimecud.gen.q
- W32/Rimecud.gen.r
- W32/Rimecud.gen.s
- W32/Rimecud.gen.t
- W32/Rimecud.gen.u
- W32/Rimecud.gen.v
- W32/Rimecud.gen.w
- W32/Rimecud.gen.x
- W32/Rimecud.gen.y
- W32/Rimecud.gen.z
- W32/Rimecud.worm.gen.bd
- W32/Sality
- W32/Sality.dr
- W32/Sasser.worm
- W32/Sasser.worm!ftp
- W32/Sdbot
- W32/Sdbot!irc
- W32/Sdbot.bat
- W32/Sdbot.cli
- W32/Sdbot.dll
- W32/Sdbot.dr
- W32/Sdbot.worm
- W32/Sdbot.worm!ftp
- W32/Sdbot.worm.bat.b
- W32/Sdbot.worm.dr
- W32/Sdbot.worm.gen
- W32/Sdbot.worm.gen.a
- W32/Sdbot.worm.gen.b
- W32/Sdbot.worm.gen.c
- W32/Sdbot.worm.gen.d
- W32/Sdbot.worm.gen.e
- W32/Sdbot.worm.gen.q
- W32/Sober
- W32/Sober!data
- W32/Sober.dam
- W32/Sober.eml
- W32/Sober.f.dam
- W32/Sober.g.dam
- W32/Sober.q!spam
- W32/Sober.r.dr
- W32/Sober.r@MM
- W32/Sobig
- W32/Sobig.dam
- W32/Sobig.eml
- W32/Sobig.f.dam
- W32/Sobig.gen@MM
- W32/Spybot.worm
- W32/Spybot.worm.gen.t
- W32/Swen
- W32/Swen@MM
- W32/VirRansom
- W32/VirRansom.a
- W32/Virut
- W32/Virut!htm
- W32/Virut!rtf
- W32/Virut-cavity-elim
- W32/Virut-elim
- W32/Virut.gen
- W32/Virut.gen.A
- W32/Virut.j!dam
- W32/Virut.n
- W32/Virut.n!inf
- W32/Virut.o
- W32/Virut.rem
- W32/Virut.rem.D
- W32/Virut.rem.E
- W32/Virut.rem.F
- W32/Virut.rem.G
- W32/Virut.rem.H
- W32/Virut.rem.I
- W32/Virut.rem.K
- W32/Virut.rem.L
- W32/Virut.rem.M
- W32/Vulcanbot
- W32/Winemmem
- W32/XDoc
- W32/XDocCrypt
- W32/XDocCrypt!Susp
- W32/XDocCrypt!rem
- W32/XDocCrypt.a
- W32/XDocCrypt.a!lnk
- W32/XDocCrypt.a!rem
- W32/XDocCrypt.a.dr
- W32/XDocCrypt.b
- W32/XDocCrypt.b.dr
- W32/XDocCrypt.c
- W32/XDocCrypt.d
- W32/Xpaj.b
- W32/Xpaj.c
- W32/Xpaj.dr
- W32/Xpaj.dr.a
- W32/Xpaj.dr.b
- W32/Yaha.eml
- W32/Yaha.gen@MM
- W32/Yaha.y@MM
- W32/Yaha@MM
- W32/Zafi
- W32/Zafi.b.dam
- W32/Zindos.worm
- W32/Zotob.worm
- W32/Zotob.worm!hosts
- W64/Expiro
- W64/Expiro.a
- W64/Expiro.b
- W64/Expiro.ba
- W64/Expiro.bb
- WebexpEnhanced
- ransom.dx
- with fishy extension
- ~T-SUS-BT
- ~T-SUS-BU
- ~T-SUS-BV
- Enhanced Detections:
- Adware-BetterSurf
- Adware-Bprotect
- Adware-DomaIQ
- Adware-OutBrowse
- Bat/Autorun.worm.aabi
- Bat/Autorun.worm.ni
- Bat/Autorun.worm.zw
- Crossrider
- Exploit-CVE2013-1493
- Exploit-DcomRpc
- Exploit-Lsass
- Exploit-XMLhttp.d
- Exploit-XMLhttp.d.gen
- Exploit-XMLhttpd.d
- FakeAlert.dx
- Generic.dam
- Generic.dx
- Generic.oh
- Generic.on
- Generic.ow
- Generic.rk
- Generic.rs
- Generic.rt
- Generic.so
- Generic.sp
- Generic.sq
- Generic.sr
- Generic.st
- Generic.su
- Generic.sv
- Generic.tz
- Generic.ub
- Generic.uc
- Generic.ui
- Generic.un
- Generic.uo
- Generic.uq
- Generic.ur
- Generic.ut
- Generic.vf
- HTA/Autorun.worm.gh!lnk
- HTool-JSP/WebShell
- HTool-JSPRat
- HTool-RemoteCmd
- HideWindow
- JS/Autorun.worm.ci
- JS/IFrame.gen
- JS/Redirector
- JV/Blacole.dx
- PWCrack-PWDump
- PWS-ZBot.gen.aux
- PWS-Zbot
- PWS-Zbot.dx
- PWS-Zbot.dx!zip
- Ransom.dx
- SWF/Exploit-Shellcode
- Trojan-SkyHook
- Upatre.dx!zip
- VBS/Autorun.worm.aaaz
- VBS/Autorun.worm.aau
- VBS/Autorun.worm.au
- VBS/Autorun.worm.bi
- VBS/Autorun.worm.gc
- VBS/Autorun.worm.gg
- VBS/Autorun.worm.k
- VBS/Autorun.worm.k!bat
- VBS/Autorun.worm.zz
- VBS/IE-Title
- W32/Autorun.Worm.aaeh
- W32/Autorun.worm
- W32/Autorun.worm!inf
- W32/Autorun.worm.a
- W32/Autorun.worm.aabl
- W32/Autorun.worm.aabl!lnk
- W32/Autorun.worm.aabp
- W32/Autorun.worm.aacl
- W32/Autorun.worm.aacz
- W32/Autorun.worm.aad
- W32/Autorun.worm.aaeb
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.aag
- W32/Autorun.worm.aah
- W32/Autorun.worm.aaj
- W32/Autorun.worm.aaj!inf
- W32/Autorun.worm.aak
- W32/Autorun.worm.aal
- W32/Autorun.worm.aao
- W32/Autorun.worm.aap
- W32/Autorun.worm.ac
- W32/Autorun.worm.af
- W32/Autorun.worm.ai
- W32/Autorun.worm.av
- W32/Autorun.worm.aw
- W32/Autorun.worm.b
- W32/Autorun.worm.bbc
- W32/Autorun.worm.bbd
- W32/Autorun.worm.bbe
- W32/Autorun.worm.bbf
- W32/Autorun.worm.bbh
- W32/Autorun.worm.bbz
- W32/Autorun.worm.bcl
- W32/Autorun.worm.bcm
- W32/Autorun.worm.bdk
- W32/Autorun.worm.bdr
- W32/Autorun.worm.beq
- W32/Autorun.worm.bey
- W32/Autorun.worm.bf
- W32/Autorun.worm.bge
- W32/Autorun.worm.bh
- W32/Autorun.worm.bm
- W32/Autorun.worm.bp
- W32/Autorun.worm.bw
- W32/Autorun.worm.bx
- W32/Autorun.worm.by
- W32/Autorun.worm.bz
- W32/Autorun.worm.c
- W32/Autorun.worm.cb
- W32/Autorun.worm.ch
- W32/Autorun.worm.cp
- W32/Autorun.worm.cs
- W32/Autorun.worm.ct
- W32/Autorun.worm.df
- W32/Autorun.worm.dq
- W32/Autorun.worm.dt
- W32/Autorun.worm.dx
- W32/Autorun.worm.ec
- W32/Autorun.worm.em
- W32/Autorun.worm.er
- W32/Autorun.worm.ev
- W32/Autorun.worm.fc
- W32/Autorun.worm.fc!bat
- W32/Autorun.worm.ff
- W32/Autorun.worm.fn
- W32/Autorun.worm.fr
- W32/Autorun.worm.fs
- W32/Autorun.worm.ft
- W32/Autorun.worm.fv
- W32/Autorun.worm.fw
- W32/Autorun.worm.fx
- W32/Autorun.worm.fy
- W32/Autorun.worm.g
- W32/Autorun.worm.gen.za
- W32/Autorun.worm.gen.zb
- W32/Autorun.worm.gl
- W32/Autorun.worm.gp
- W32/Autorun.worm.gr
- W32/Autorun.worm.gt
- W32/Autorun.worm.gu
- W32/Autorun.worm.gv
- W32/Autorun.worm.h
- W32/Autorun.worm.i
- W32/Autorun.worm.k
- W32/Autorun.worm.n
- W32/Autorun.worm.p
- W32/Autorun.worm.r
- W32/Autorun.worm.x
- W32/Autorun.worm.y
- W32/Autorun.worm.zf
- W32/Autorun.worm.zf.gen
- W32/Autorun.worm.zp
- W32/Autorun.worm.zu
- W32/Autorun.worm.zv
- W32/Autorun.worm.zx
- W32/Autorun.worm.zz
- W32/Autorun.worm.zze
- W32/Autorun.worm.zzi
- W32/Autorun.worm.zzj
- W32/Autorun.worm.zzk
- W32/Autorun.worm.zzn
- W32/Autorun.worm.zzp
- W32/Autorun.worm.zzs
- W32/Autorun.worm.zzw
- W32/Bagle
- W32/Bagle!eml.gen
- W32/Bagle.dldr
- W32/Bagle.dll.dr
- W32/Bagle.gen
- W32/Bropia.worm
- W32/Bugbear
- W32/Conficker
- W32/Conficker.sys
- W32/Conficker.worm
- W32/Conficker.worm!inf
- W32/Conficker.worm.dr
- W32/Conficker.worm.gen.b
- W32/Conficker.worm.gen.d
- W32/Dumaru
- W32/Dumaru.dll
- W32/Elkern.cav.c
- W32/Elkern.cav.c.dam
- W32/Fujacks!htm
- W32/FunLove
- W32/Gaobot.worm
- W32/IRCBot
- W32/IRCBot.worm
- W32/IRCBot.worm.gen.ai
- W32/IRCbot
- W32/IRCbot.worm
- W32/IRCbot.worm.dll
- W32/IRCbot.worm.gen.aj
- W32/Klez
- W32/Koobface.worm
- W32/Koobface.worm!env
- W32/Koobface.worm.gen.aj
- W32/Koobface.worm.gen.au
- W32/Koobface.worm.gen.bg
- W32/Koobface.worm.gen.d
- W32/Koobface.worm.gen.f
- W32/Koobface.worm.gen.g
- W32/Koobface.worm.gen.h
- W32/Koobface.worm.gen.n
- W32/Koobface.worm.gen.r
- W32/Koobface.worm.gen.s
- W32/Koobface.worm.gen.z
- W32/Koobface.worm.gen.z2
- W32/Korgo.worm
- W32/Lirva.eml
- W32/Lovgate
- W32/Mimail
- W32/Morto
- W32/MyWife
- W32/Mydoom
- W32/Mytob
- W32/Mytob.gen@MM
- W32/Netsky
- W32/Nimda.htm
- W32/Nuwar
- W32/Nuwar.dam
- W32/Nuwar.sys
- W32/Nuwar@MM
- W32/Nuwar@MM!rar
- W32/Nuwar@mm
- W32/Pate
- W32/Rimecud
- W32/Rimecud.gen.aj
- W32/Rimecud.gen.ay
- W32/Rimecud.gen.br
- W32/Rimecud.gen.dl
- W32/Rimecud.gen.e
- W32/Sality
- W32/Sality.dr
- W32/Sasser.worm
- W32/Sdbot
- W32/Sdbot.dr
- W32/Sdbot.worm
- W32/Sdbot.worm.dr
- W32/Sober
- W32/Sobig
- W32/Sobig.dam
- W32/Sobig.f.dam
- W32/Spybot.worm
- W32/Virut
- W32/Virut!htm
- W32/Virut.n
- W32/Virut.rem
- W32/Vulcanbot
- W32/Winemmem
- W32/XDocCrypt.a
- W32/XDocCrypt.a.dr
- W32/Xpaj
- W32/Xpaj.b
- W32/Xpaj.c
- W32/Zotob.worm
- ZeroAccess
- ransom.dx
Changes for v12.1.0.1299 - v12.1.0.1303
- Enhanced Detections:
- JS/Exploit-Angler.a
Changes for v12.1.0.1298 - v12.1.0.1299
- New Detections:
- Exploit-2013-1488
- Exploit-CVE-2012-1875
- Exploit-CVE-2012-1889
- Exploit-CVE-2014-0558
- Exploit-CVE-2014-4671
- Exploit-CVE2008-2551
- Exploit-CVE2010-0822
- Exploit-CVE2010-2568!lnk
- Exploit-CVE2010-3333
- Exploit-CVE2010-3333.i
- Exploit-CVE2010-3333.j
- Exploit-CVE2010-3333.l
- Exploit-CVE2010-3333.m
- Exploit-CVE2012-0158!a
- Exploit-CVE2012-0158.a
- Exploit-CVE2012-0158.l!rtf
- Exploit-CVE2012-0170
- Exploit-CVE2012-0185
- Exploit-CVE2012-0198
- Exploit-CVE2012-0289
- Exploit-CVE2012-0500
- Exploit-CVE2012-0550
- Exploit-CVE2012-1493
- Exploit-CVE2012-1535
- Exploit-CVE2012-1535!doc
- Exploit-CVE2012-1538
- Exploit-CVE2012-1723
- Exploit-CVE2012-1723.a
- Exploit-CVE2012-1723.b
- Exploit-CVE2012-1723.c
- Exploit-CVE2012-1723.d
- Exploit-CVE2012-1723.f
- Exploit-CVE2012-1723.g
- Exploit-CVE2012-1723.gen.a
- Exploit-CVE2012-1723.gen.b
- Exploit-CVE2012-1723.h
- Exploit-CVE2012-1723.i
- Exploit-CVE2012-1723.j
- Exploit-CVE2012-1723.l
- Exploit-CVE2012-1723.m
- Exploit-CVE2012-1856!rtf
- Exploit-CVE2012-1875
- Exploit-CVE2012-1876
- Exploit-CVE2012-1889
- Exploit-CVE2012-1891
- Exploit-CVE2012-2049
- Exploit-CVE2012-2050
- Exploit-CVE2012-2516
- Exploit-CVE2012-2539
- Exploit-CVE2012-3748
- Exploit-CVE2012-4681.a
- Exploit-CVE2012-4786
- Exploit-CVE2012-4792
- Exploit-CVE2012-4969
- Exploit-CVE2012-5076
- Exploit-CVE2012-5088
- Exploit-CVE2012-5271
- Exploit-CVE2012-5672
- Exploit-CVE2013-0074
- Exploit-CVE2013-0422
- Exploit-CVE2013-0422.a
- Exploit-CVE2013-0431
- Exploit-CVE2013-0431.a
- Exploit-CVE2013-0633
- Exploit-CVE2013-0634
- Exploit-CVE2013-0640
- Exploit-CVE2013-0753
- Exploit-CVE2013-0809
- Exploit-CVE2013-1298
- Exploit-CVE2013-1347
- Exploit-CVE2013-1488
- Exploit-CVE2013-1489
- Exploit-CVE2013-1491
- Exploit-CVE2013-1493
- Exploit-CVE2013-1493.a
- Exploit-CVE2013-1690
- Exploit-CVE2013-2420
- Exploit-CVE2013-2423
- Exploit-CVE2013-2423.a
- Exploit-CVE2013-2460
- Exploit-CVE2013-2463
- Exploit-CVE2013-2465
- Exploit-CVE2013-2465.a
- Exploit-CVE2013-2470
- Exploit-CVE2013-2471
- Exploit-CVE2013-2473
- Exploit-CVE2013-2551
- Exploit-CVE2013-2729
- Exploit-CVE2013-2912
- Exploit-CVE2013-3111
- Exploit-CVE2013-3120
- Exploit-CVE2013-3121
- Exploit-CVE2013-3163
- Exploit-CVE2013-3184
- Exploit-CVE2013-3845
- Exploit-CVE2013-3893
- Exploit-CVE2013-3893.b
- Exploit-CVE2013-3893.c
- Exploit-CVE2013-3893.d
- Exploit-CVE2013-3897
- Exploit-CVE2013-3906
- Exploit-CVE2013-3914
- Exploit-CVE2013-3918
- Exploit-CVE2013-4798
- Exploit-CVE2013-5049
- Exploit-CVE2013-5329
- Exploit-CVE2013-5331
- Exploit-CVE2013-6877
- Exploit-CVE2014-0282
- Exploit-CVE2014-0287
- Exploit-CVE2014-0289
- Exploit-CVE2014-0290
- Exploit-CVE2014-0304
- Exploit-CVE2014-0307
- Exploit-CVE2014-0309
- Exploit-CVE2014-0322
- Exploit-CVE2014-0324
- Exploit-CVE2014-0497
- Exploit-CVE2014-0502
- Exploit-CVE2014-0511
- Exploit-CVE2014-0515
- Exploit-CVE2014-0556
- Exploit-CVE2014-0569
- Exploit-CVE2014-0779
- Exploit-CVE2014-1753
- Exploit-CVE2014-1761
- Exploit-CVE2014-1761!rtf
- Exploit-CVE2014-1762
- Exploit-CVE2014-1772
- Exploit-CVE2014-1776
- Exploit-CVE2014-1785
- Exploit-CVE2014-1795
- Exploit-CVE2014-1805
- Exploit-CVE2014-1815
- Exploit-CVE2014-4057
- Exploit-CVE2014-4088
- Exploit-CVE2014-4089
- Exploit-CVE2014-4092
- Exploit-CVE2014-4094
- Exploit-CVE2014-4114
- Exploit-CVE2014-6373
- Exploit-CVE2014-7247
- Exploit-CVE2014-8440
- Exploit-CVE2014-8967
- Exploit-CodeBase.chm
- Exploit-Downloader
- Exploit-Goonkit!JNLP
- Exploit-PDF!Blacole
- Exploit-PDF!Blacole.d
- Exploit-PDF!Blacole.e
- Exploit-PDF!Blacole.f
- Exploit-PDF!Blacole.g
- Exploit-PDF!Blacole.h
- Exploit-PDF!Blacole.i
- Exploit-PDF!Blacole.j
- Exploit-PDF!Blacole.k
- Exploit-PDF!Blacole.l
- Exploit-PDF!Blacole.m
- Exploit-PDF!Blacole.n
- Exploit-PDF!Blacole.o
- Exploit-PDF!Blacole.p
- Exploit-PDF!Blacole.q
- Exploit-PDF!Blacole.r
- Exploit-PDF!Blacole.s
- Exploit-PDF!Blacole.t
- Exploit-PDF.bo.gen
- Exploit-PDF.sc.gen
- Exploit-PDF.sd
- Exploit-PowerShell
- Exploit-Redokit.b
- Exploit-Rekit.gen
- Exploit-SWF.e
- Exploit-crypto_CRMFRequest
- Exploit-lnk
- Exploit/ObfusJava
- Generic Exploit
- Generic Exploit.f
- Generic Exploit.n
- Generic Exploit.o
- Generic.vg
- GenericExploit.a
- GenericExploit.b
- GenericExploit.c
- GenericExploit.d
- JS/Blacole-Redirect.ai
- JS/Downloader
- JS/Downloader.gen.a
- JS/Exploit
- JS/Exploit!JNLP.d
- JS/Exploit-Angler
- JS/Exploit-Angler.a
- JS/Exploit-Angler.b
- JS/Exploit-Angler.c
- JS/Exploit-Astrum
- JS/Exploit-Blacole.lg
- JS/Exploit-Blacole.lh
- JS/Exploit-Blacole.li
- JS/Exploit-Blacole.nb
- JS/Exploit-Blacole.nc
- JS/Exploit-Blacole.nd
- JS/Exploit-Bleedlife.a
- JS/Exploit-Bleedlife.b
- JS/Exploit-CVE2013-2551
- JS/Exploit-Cbosskit.a
- JS/Exploit-Cool.b
- JS/Exploit-Cool.c
- JS/Exploit-Cool.d
- JS/Exploit-Cool.e
- JS/Exploit-Cotcas
- JS/Exploit-Cotcas.a
- JS/Exploit-Cpackit.a
- JS/Exploit-Cpackit.b
- JS/Exploit-Critkit.a
- JS/Exploit-Critkit.b
- JS/Exploit-Godakit.a
- JS/Exploit-Godakit.gen
- JS/Exploit-Goonkit.a
- JS/Exploit-Hellokit
- JS/Exploit-Himankit
- JS/Exploit-Impackit.a
- JS/Exploit-Impackit.b
- JS/Exploit-Infinity
- JS/Exploit-Jdb.a
- JS/Exploit-Meadgive
- JS/Exploit-Meadgive.a
- JS/Exploit-Neukit.a
- JS/Exploit-Nuckit!gen
- JS/Exploit-Nuclear
- JS/Exploit-Nuclearkit
- JS/Exploit-Nuclearkit.a
- JS/Exploit-Nuclearkit.b
- JS/Exploit-Nuclearkit.c
- JS/Exploit-Nuclearkit.d
- JS/Exploit-Nuclearkit.e
- JS/Exploit-PDF.a
- JS/Exploit-Phoex
- JS/Exploit-Phoex.a
- JS/Exploit-Redokit.a
- JS/Exploit-Rekit.e
- JS/Exploit-Rigkit
- JS/Exploit-Rigkit.a
- JS/Exploit-Sakurakit.a
- JS/Exploit-Sorangekit.a
- JS/Exploit-Sorangekit.b
- JS/Exploit-Sorangekit.c
- JS/Exploit-Splkit.a
- JS/Exploit-Stykit.a
- JS/Exploit-Stykit.b
- JS/Exploit-Stykit.c
- JS/Exploit-Stykit.d
- JS/Exploit-Stykit.e
- JS/Exploit-Stykit.f
- JS/Exploit-Stykit.g
- JS/Exploit-Stykit.h
- JS/Exploit-Stykit.i
- JS/Exploit-Stykit.j
- JS/Exploit-Stykit.k
- JS/Exploit-Stykit.l
- JS/Exploit.a
- JS/Exploit.b
- JS/Exploit.c
- JS/Exploit.d
- JS/FaceHack
- JS/Faceliker.t
- JS/Redirect-Angler.a
- JS/Redirect-Cpackit.a
- JS/Redirect-Critkit.a
- JS/Redirect-Gzeronekit.a
- JS/Redirect-Jdb.a
- JS/SMSSend.c
- Java/Adwind
- OSX/Exploit.a
- OSX/Exploit.b
- OSX/GetShell.gen
- Perl-ShellBot
- SWF/Exploit-Angler
- SWF/Exploit-CVE-2014-1776
- SWF/Exploit-CVE2012-0779
- SWF/Exploit-CVE2014-0322
- SWF/Exploit-Shellcode
- SWF/FakeScan
- VBA/Downloader.gen
- VBA/Downloader.gen.a
- VBS/Power.worm.gen
- X97M/Power.worm.gen
- X97M/Powershell.gen
- XDPWrapper
- Enhanced Detections:
- Exploit-CVE2010-3333.j
- Exploit-CVE2011-2462
- Exploit-CVE2011-3544
- Exploit-CVE2012-0158
- Exploit-CVE2012-0158!rtf
- Exploit-CVE2012-0507
- Exploit-CVE2012-1535
- Exploit-CVE2012-1723
- Exploit-CVE2012-1723.g
- Exploit-CVE2012-1723.h
- Exploit-CVE2012-1723.i
- Exploit-CVE2012-1723.j
- Exploit-CVE2012-1723.l
- Exploit-CVE2012-1889
- Exploit-CVE2012-2539
- Exploit-CVE2012-4681.a
- Exploit-CVE2012-4792
- Exploit-CVE2012-4969
- Exploit-CVE2012-5076
- Exploit-CVE2013-0074
- Exploit-CVE2013-0422
- Exploit-CVE2013-0422.a
- Exploit-CVE2013-0431
- Exploit-CVE2013-0634
- Exploit-CVE2013-1347
- Exploit-CVE2013-1493
- Exploit-CVE2013-1493.a
- Exploit-CVE2013-1690
- Exploit-CVE2013-2423
- Exploit-CVE2013-2423.a
- Exploit-CVE2013-2460
- Exploit-CVE2013-2465
- Exploit-CVE2013-2465.a
- Exploit-CVE2013-2471
- Exploit-CVE2013-3163
- Exploit-CVE2013-3897
- Exploit-CVE2013-3918
- Exploit-CVE2014-0287
- Exploit-CVE2014-0307
- Exploit-CVE2014-0322
- Exploit-CVE2014-0502
- Exploit-CVE2014-0515
- Exploit-CVE2014-1761
- Exploit-CVE2014-1761!rtf
- Exploit-CVE2014-1776
- Exploit-CVE2014-1795
- Exploit-CVE2014-1815
- Exploit-CVE2014-7247
- Exploit-lnk
- Generic Downloader.z
- Generic Exploit
- Generic Exploit.f
- Generic.ux
- Generic.vc
- Generic.vf
- GenericExploit.d
- JS/Blacole-Redirector
- JS/Exploit-Angler.a
- JS/Exploit-Blacole.aj
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lj
- JS/Exploit-CVE2013-2551
- JS/Exploit-Nuclearkit.d
- JS/Exploit-Sorangekit.c
- JS/Exploit.c
- SWF/Exploit-Angler
- SWF/Exploit-Shellcode
- VBS/Power.worm.gen
- X97M/Powershell.gen
Changes for v12.1.0.1297 - v12.1.0.1298
- Enhanced Detections:
- Generic.ux
- Generic.vf
- W32/VirRansom
Changes for v12.1.0.1294 - v12.1.0.1297
- Enhanced Detections:
- Exploit-CVE2012-0158
- Generic.ux
- Generic.vf
Changes for v12.1.0.1293 - v12.1.0.1294
- Enhanced Detections:
- Generic.ux
Changes for v12.1.0.1291 - v12.1.0.1293
- New Detections:
- Generic.vf
- Enhanced Detections:
- Crossrider
Changes for v12.1.0.1279 - v12.1.0.1291
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Generic Downloader.gm
- Generic.ux
- Generic.vc
- VBS/Autorun.worm.aaib
Changes for v12.1.0.1277 - v12.1.0.1279
- Enhanced Detections:
- W32/Rimecud
Changes for v12.1.0.1276 - v12.1.0.1277
- Enhanced Detections:
- Crossrider
Changes for v12.1.0.1271 - v12.1.0.1272
- Enhanced Detections:
- Crossrider
- Generic PWS.o
- Generic.ux
- VBS/Autorun.worm.aaic
- W32/VirRansom
Changes for v12.1.0.1253 - v12.1.0.1267
- New Detections:
- Generic.vd
- Generic.ve
- VBS/Autorun.worm.aaic
- Enhanced Detections:
- Exploit-PDF.rt.gen
- Generic PWS.o
- Generic.ux
Changes for v12.1.0.1251 - v12.1.0.1253
- Enhanced Detections:
- Generic.uw
- Generic.ux
Changes for v12.1.0.1249 - v12.1.0.1251
- Enhanced Detections:
- Generic.ux
Changes for v12.1.0.1245 - v12.1.0.1249
- Enhanced Detections:
- Generic.sq
Changes for v12.1.0.1242 - v12.1.0.1245
- New Detections:
- Generic.uy
- Generic.uz
- Generic.vb
- Enhanced Detections:
- Exploit-PDF.b.gen
- Generic Downloader.z
- Generic.uw
- Generic.ux
Changes for v12.1.0.1240 - v12.1.0.1242
- Enhanced Detections:
- Generic PWS.o
- Generic.uw
- Generic.ux
Changes for v12.1.0.1227 - v12.1.0.1240
- New Detections:
- Generic.uw
- Generic.ux
Changes for v12.1.0.1220 - v12.1.0.1227
- Enhanced Detections:
- Generic.uo
- Generic.ut
Changes for v12.1.0.1219 - v12.1.0.1220
- Enhanced Detections:
- Generic.uo
- Generic.us
Changes for v12.1.0.1214 - v12.1.0.1215
- Enhanced Detections:
- Generic.so
- Generic.ur
Changes for v12.1.0.1201 - v12.1.0.1214
- Enhanced Detections:
- Generic.so
- Generic.ur
- PWS-Zbot.gen.oj
- W32/Autorun.worm.gt
Changes for v12.1.0.1198 - v12.1.0.1201
- Enhanced Detections:
- Generic.so
Changes for v12.1.0.1194 - v12.1.0.1198
- Enhanced Detections:
- Generic.so
- Generic.uo
- Generic.ur
Changes for v12.1.0.1189 - v12.1.0.1194
- Enhanced Detections:
- Generic.uo
Changes for v12.1.0.1185 - v12.1.0.1189
- New Detections:
- Generic.up
- Generic.uq
- Enhanced Detections:
- Generic.so
- Generic.un
Changes for v12.1.0.1176 - v12.1.0.1185
- Enhanced Detections:
- Exploit-CVE2012-0158
- Generic.so
- Generic.sp
- Generic.un
- Generic.uo
Changes for v12.1.0.1173 - v12.1.0.1176
- New Detections:
- Generic.un
- Enhanced Detections:
- Generic.ul
- Generic.un
Changes for v12.1.0.1172 - v12.1.0.1173
- New Detections:
- Ransom.c!env
- Enhanced Detections:
- Generic.uh
Changes for v12.1.0.1171 - v12.1.0.1172
- Enhanced Detections:
- Generic.tm
- Generic.ul
- Generic.um
- PWS-Zbot.gen.oj
Changes for v12.1.0.1165 - v12.1.0.1171
- Enhanced Detections:
- Generic.tm
- Generic.um
Changes for v12.1.0.1164 - v12.1.0.1165
- Enhanced Detections:
- Exploit-CVE2012-0158
- Generic.tm
- Generic.uk
Changes for v12.1.0.1155 - v12.1.0.1164
- Enhanced Detections:
- Generic.so
- Generic.sq
- with fishy extension
Changes for v12.1.0.1153 - v12.1.0.1155
- New Detections:
- Generic.ul
- Generic.um
- Enhanced Detections:
- Exploit-CVE2012-0158
- Exploit-CVE2012-0158!rtf
- Generic.so
- Generic.sq
- Generic.uk
Changes for v12.1.0.1145 - v12.1.0.1153
- New Detections:
- OSX/MacDefender
- OSX/iWorm.b
- Enhanced Detections:
- Generic.uh
- Generic.uj
Changes for v12.1.0.1143 - v12.1.0.1145
- New Detections:
- Generic.uk
- Enhanced Detections:
- Generic PWS.o
- Generic.rs
- Generic.so
Changes for v12.1.0.1140 - v12.1.0.1143
- New Detections:
- Generic.uj
- Enhanced Detections:
- Generic.so
- Generic.ub
- Generic.uh
Changes for v12.1.0.1123 - v12.1.0.1140
- Enhanced Detections:
- BackDoor-EXI
- BackDoor-EYT
- DDoS-KSig
- Downloader-CJX
- Exploit-CVE2012-0158
- Exploit-MSExcel.p
- Exploit-SWF!Blacole.dx
- FakeAlert-AU
- FakeAlert-AVSoft
- FakeAlert-B.dr
- FakeAlert-BF
- FakeAlert-CK
- FakeAlert-F
- FakeAlert-G
- FakeAlert-GreenAV
- FakeAlert-HO
- FakeAlert-I
- FakeAlert-KS.gen.aw
- FakeAlert-MaCatte
- FakeAlert-OT
- FakeAlert-PA
- FakeAlert-PC-Care
- FakeAlert-PJ
- FakeAlert-PM
- FakeAlert-QU
- FakeAlert-SecurityTool.gs
- FakeAlert-SysAV
- FakeAlert-Vimes
- FakeAlert-av360
- FakeAlert.dx
- Fakealert-KS
- Generic Downloader.nx
- Generic FakeAlert
- Generic FakeAlert.br
- Generic.Dropped.a
- Generic.iz
- Generic.ji
- Generic.jl
- Generic.ju
- Generic.kc
- Generic.ki
- Generic.kl
- Generic.lm
- Generic.ly
- Generic.lz
- Generic.mb
- Generic.mg
- Generic.mo
- Generic.mp
- Generic.mu
- Generic.mz
- Generic.nb
- Generic.nd
- Generic.nk
- Generic.nv
- Generic.ny
- Generic.oa
- Generic.oc
- Generic.oq
- Generic.or
- Generic.ou
- Generic.pa
- Generic.pc
- Generic.pf
- Generic.pk
- Generic.pm
- Generic.pn
- Generic.pq
- Generic.pr
- Generic.ps
- Generic.pu
- Generic.ru
- Generic.rx
- Generic.sg
- Generic.sk
- Generic.so
- Generic.sq
- Generic.tj
- Generic.tw
- Generic.ub
- Generic.uf
- JS/Exploit-Blacole
- JS/Exploit-Blacole.jn
- JV/Blacole.dx
- PWS-TravNet
- PWS-Zbot.dx
- PWS-Zbot.gen.hv
- Proxy-Agent.af.dr
- Ransom.dx
- VBS/Autorun.worm.aaaz
- W32/Autorun.worm.aabc
- W32/Autorun.worm.aabl
- W32/Autorun.worm.aabm
- W32/Autorun.worm.aaby
- W32/Autorun.worm.aaj
- W32/Autorun.worm.ai
- W32/Autorun.worm.bbc
- W32/Autorun.worm.bx!atr
- W32/Autorun.worm.c
- W32/Autorun.worm.dj
- W32/Autorun.worm.h
- W32/Bagle!pwdzip
- W32/Conficker
- W32/Conficker.sys
- W32/Generic.worm.aa
- W32/IRCbot.worm.gen.am
- W32/Koobface.worm
- W32/Lovgate
- W32/Nuwar.sys
- W32/Nuwar@MM
- W32/Vulcanbot
Changes for v12.1.0.1120 - v12.1.0.1123
- New Detections:
- AFXRootkit
- AdClicker-EV
- AlertUp
- Apropos
- BackDoor-AWQ
- BackDoor-AXO
- BackDoor-BAC
- BackDoor-CSX
- BackDoor-CSY
- BackDoor-CUX
- BackDoor-CWD
- BackDoor-DIX
- BackDoor-DJF
- BackDoor-DJZ
- BackDoor-DOQ
- BackDoor-DSH
- BackDoor-Spyeye
- Backdoor-BAC
- Backdoor-DSN
- Boiskit
- Bombat
- CleanThreadServiceTable
- Cutwail
- DISASM
- DarkWalt.e
- Darkwalt.a
- Darkwalt.b
- Downloader-AUE
- Downloader-BAI
- Downloader-ZQ
- EliteKeylogger
- Festi
- Festi.b
- Festi.c
- Gapz.a
- Generic BackDoor.u
- Generic PWS.y!mem
- Generic RootKit.a
- Generic RootKit.e
- Generic RootKit.f
- Generic Rootkit.d
- Generic Rootkit.g
- Generic.ud
- Generic.ue
- Generic.uf
- Generic.ug
- HE4Hook
- HackerDefender
- Hidden-Process.a
- HideMost
- HideVault!sys
- Intel
- Keylog-SpyLantern.a
- Keylog-SpyLantern.b
- Koutodoor.gen
- Krnl_Patch_Jmp_Opcode_EB
- Lando
- MadCodeHook
- MemHeur
- NTRootKit-H
- NTRootKit-I
- NTRootKit-J
- NTRootKit-K
- NTRootkit-E
- NTRootkit-S
- NTRootkit-U
- NTRootkit-Z
- Nagyo
- PWS-Gogo
- PWS-Goldun
- PWS-LDPinch
- PWS-Onlinegames
- PWS-Progent
- PWS-Spyeye
- Patched-Import
- Pincav.gen
- Popureb!rootkit
- Puper
- Qoolaid.a
- RKI-02
- RKI-03
- RKI-04
- RKI-05
- RKI-06
- RKI-07
- RKI-08
- RKI-09
- RKI-0A
- RKI-0B
- RKI-0C
- RKI-0D
- RKI-0E
- RKI-0F
- RKI-10
- RKI-11
- RKI-12
- RKI-13
- RKI-14
- Ramnit
- RootKit-NTIllusion
- Rustock
- Rustock.gen.b
- Spam-Mailbot.c
- Spy-Agent.bv
- Spy-Agent.bw
- Spy-Agent.de
- Spy-Agent.dn
- Srizbi
- StartPage-KM
- StealthMBR
- StealthMBR.a
- StealthMBR.b
- StealthMBR.c
- StealthMBR.d
- Urburous
- VAnti
- Vanquish
- Vanti
- W32/Almanahe
- W32/Almanahe.a
- W32/Cutwail.a
- W32/Feebs
- W32/Fujacks
- W32/Kolab
- W32/Lurker
- W32/Maslan
- W32/PWS-Zbot
- W32/Ramnit
- W32/Routrobot.worm
- W64/Gapz.a
- W64/TDSS.d
- W64/TDSS.f
- W64/TDSS.g
- W64/Urburous
- W64/Xpaj
- clean_mailbot_c
- cleanirp
- cleanssdt
- image
- kernel_api
- killthisrootkit
- memheur
- ntfs
- restoreexports
- restoreimports
- rootkit
- rootscan
- rootscan64
- rootscanExtn
- Enhanced Detections:
- DNSChanger.cw
- DNSChanger.dx
- DNSChanger.f
- Darkwalt.d
- FakeAlert-AB
- Generic PWS.o
- Generic RootKit.a
- Generic Rootkit.d
- Generic.dx
- Generic.so
- Generic.tm
- NTRootKit-K
- PWS-Gogo
- PWS-Spyeye
- Spam-Mailbot.c
- Spy-Agent.bv
- Spy-Agent.de
- TDSS.a
- TDSS.b
- TDSS.c
- TDSS.d
- TDSS.e
- TDSS.f
- TDSS.g
- W32/IRCbot
- W32/Nuwar
- W32/Pinkslipbot
- W32/Xpaj
- ZeroAccess
Changes for v12.1.0.1110 - v12.1.0.1120
- Enhanced Detections:
- Generic.tm
- Generic.uc
Changes for v12.1.0.1107 - v12.1.0.1110
- Enhanced Detections:
- Generic.sq
- Generic.tm
- Generic.ub
Changes for v12.1.0.1102 - v12.1.0.1107
- Enhanced Detections:
- 1
- Generic.rs
- Generic.tm
- Generic.ub
Changes for v12.1.0.1099 - v12.1.0.1102
- New Detections:
- Generic.ua
- Generic.ub
- Generic.uc
- Enhanced Detections:
- Generic.it
- Generic.so
- Generic.tb
- Generic.tm
- Generic.tz
Changes for v12.1.0.1091 - v12.1.0.1099
- Enhanced Detections:
- Generic.tm
- Generic.tz
- Ransom-O
Changes for v12.1.0.1090 - v12.1.0.1091
- New Detections:
- Generic.tz
- Enhanced Detections:
- Adware-SearchSuite
- Exploit-CVE2012-0158
- Exploit-CVE2012-0507
- Generic.sq
- Generic.tm
- W32/Autorun.worm.c
Changes for v12.1.0.1083 - v12.1.0.1090
- New Detections:
- Adware-SearchSuite
- Enhanced Detections:
- Generic.sq
- Generic.tt
- VBS/Autorun.worm.k
Changes for v12.1.0.1076 - v12.1.0.1083
- Enhanced Detections:
- Generic.so
- Generic.sq
- Generic.tm
- Generic.tv
Changes for v12.1.0.1073 - v12.1.0.1076
- New Detections:
- Generic.tu
- Generic.tv
- Enhanced Detections:
- Generic Downloader.z
- Generic.rs
- Generic.sq
- Generic.tm
- Ransom-O
Changes for v12.1.0.1071 - v12.1.0.1073
- Enhanced Detections:
- Generic PWS.o
- Generic.sq
- Generic.tm
- Generic.tt
Changes for v12.1.0.1067 - v12.1.0.1071
- Enhanced Detections:
- Generic.rs
- Generic.sq
- Generic.tm
- Generic.tt
- W32/Autorun.worm.aaeh
Changes for v12.1.0.1061 - v12.1.0.1067
- New Detections:
- Generic.tt
- Enhanced Detections:
- Generic PWS.o
- Generic.rs
- Generic.so
- Generic.tb
- Generic.tm
- JS/Exploit-Blacole.le
- PWS-Zbot.gen.aft
- Ransom-O
Changes for v12.1.0.1060 - v12.1.0.1061
- Enhanced Detections:
- Exploit-CVE2012-0158
- Generic.sq
- Generic.tm
- Generic.ts
Changes for v12.1.0.1056 - v12.1.0.1060
- New Detections:
- Generic.ts
- Enhanced Detections:
- Generic.sq
- Generic.tm
- Generic.tr
Changes for v12.1.0.1053 - v12.1.0.1056
- Enhanced Detections:
- Generic PWS.o
- Generic.rs
- Generic.rt
- Generic.tb
Changes for v12.1.0.1051 - v12.1.0.1053
- Enhanced Detections:
- Generic PWS.o
- Generic.rt
- Generic.so
- Generic.sq
- Generic.tm
- VBS/Autorun.worm.k
Changes for v12.1.0.1049 - v12.1.0.1051
- Enhanced Detections:
- Generic Downloader.z
- Generic.rs
- Generic.rt
- Generic.sq
- Generic.tb
Changes for v10.2.0.1048 - v12.1.0.1049
- Enhanced Detections:
- Generic PWS.o
- Generic.sq
- Generic.tb
- Generic.ti
Changes for v12.1.0.1047 - v10.2.0.1048
- Enhanced Detections:
- Adware-OutBrowse
- Generic PWS.o
- Generic.rs
- Generic.rt
- Generic.sq
- Generic.tb
- Generic.tm
- Generic.tr
- cleanStartUpEntriesCLIB
Changes for v12.1.0.1041 - v12.1.0.1047
- New Detections:
- Generic.Dropped.a
- Enhanced Detections:
- Crossrider
- Generic.tb
- Generic.tr
Changes for v12.1.0.1040 - v12.1.0.1041
- New Detections:
- Generic.tr
- Enhanced Detections:
- Generic.rs
- Generic.rt
- Generic.sq
- Generic.tb
- JS/Exploit-Blacole.ht
- Urburous
- W64/Urburous
Changes for v12.1.0.1039 - v12.1.0.1040
- Enhanced Detections:
- Generic.sq
- Generic.tb
- Generic.tq
Changes for v12.1.0.1038 - v12.1.0.1039
- Enhanced Detections:
- Generic.tb
- Generic.tq
Changes for v12.1.0.1035 - v12.1.0.1038
- New Detections:
- Generic.tq
- Enhanced Detections:
- Generic.tb
- JS/Exploit-Blacole.ld
- W32/Autorun.worm.h
Changes for v12.1.0.1030 - v12.1.0.1035
- Enhanced Detections:
- Generic FakeAlert
- Generic.so
- Generic.tb
- Generic.tp
- PWS-Zbot.gen.oj
Changes for v12.1.0.1028 - v12.1.0.1029
- New Detections:
- Generic.tp
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Generic.tb
- Generic.tm
- Generic.to
- Ransom-O
Changes for v12.1.0.1025 - v12.1.0.1028
- New Detections:
- Generic.to
- Enhanced Detections:
- Generic.tb
- Generic.ti
- Generic.tm
- Ransom-O
Changes for v12.1.0.1016 - v12.1.0.1025
- Enhanced Detections:
- Generic.tb
- Generic.tl
Changes for v12.1.0.1015 - v12.1.0.1016
- Enhanced Detections:
- Generic.so
- Generic.tb
- Generic.ti
- Generic.tm
Changes for v12.1.0.1014 - v12.1.0.1015
- New Detections:
- Generic.tm
- Generic.tn
- Enhanced Detections:
- Generic.tb
- Generic.ti
- Generic.tl
- JS/Exploit-Blacole.ld
- Ransom-O
Changes for v12.1.0.1011 - v12.1.0.1014
- New Detections:
- Generic.tj
- Generic.tk
- Generic.tl
- Enhanced Detections:
- Generic Downloader.z
- Generic.so
- Generic.tb
- JS/Wonka
Changes for v12.1.0.1002 - v12.1.0.1011
- Enhanced Detections:
- Adware-BetterSurf
- Exploit-CVE2012-0158!rtf
- Generic.sq
- PWS-ZBot.gen.aux
Changes for v12.1.0.995 - v12.1.0.1002
- Enhanced Detections:
- Generic.sz
- Generic.tg
- PWS-ZBot.gen.avh
Changes for v12.1.0.992 - v12.1.0.995
- Enhanced Detections:
- Generic Downloader.z
- Generic.sq
- Generic.tb
- Generic.tf
Changes for v12.1.0.990 - v12.1.0.992
- Enhanced Detections:
- Generic.so
- Generic.tg
Changes for v12.1.0.987 - v12.1.0.990
- New Detections:
- Generic.tg
- Generic.th
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Generic.sq
- Generic.tb
- W32/Autorun.worm.hm
Changes for v12.1.0.985 - v12.1.0.987
- New Detections:
- Generic.tf
- Enhanced Detections:
- Crossrider
- Generic.sq
- Generic.tb
- W32/Expiro.gen.ra
- W64/Expiro.ba
Changes for v12.1.0.981 - v12.1.0.985
- New Detections:
- PWS-ZBot.gen.avh
- Enhanced Detections:
- Generic.tb
- Generic.te
- W32/Autorun.worm.gt
Changes for v12.1.0.973 - v12.1.0.981
- Enhanced Detections:
- Generic.tb
- Generic.te
Changes for v12.1.0.965 - v12.1.0.973
- Enhanced Detections:
- Generic.tb
- Generic.td
- JS/Exploit-Blacole.ht
Changes for v12.1.0.960 - v12.1.0.965
- Enhanced Detections:
- Adware-BetterSurf
- Generic.sq
Changes for v12.1.0.959 - v12.1.0.960
- Enhanced Detections:
- Bojan
- Generic Downloader.z
- Generic.sq
- Generic.sr
- Generic.ta
- PWS-ZBot.gen.aux
- W32/Rimecud
Changes for v12.1.0.954 - v12.1.0.959
- New Detections:
- Generic.ta
- Enhanced Detections:
- Generic.sq
- Somoto-BetterInstaller
Changes for v12.1.0.949 - v12.1.0.954
- Enhanced Detections:
- Generic.sq
- Generic.sv
Changes for v12.1.0.943 - v12.1.0.949
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Generic Downloader.z
- Generic.sq
- Generic.sr
- W32/Autorun.worm.gt
Changes for v12.1.0.939 - v12.1.0.943
- Enhanced Detections:
- Generic.sv
Changes for v12.1.0.936 - v12.1.0.939
- New Detections:
- Generic.sx
- Generic.sy
- Generic.sz
- Enhanced Detections:
- Adware-BetterSurf
- Generic.sq
- Generic.su
- JV/Exploit-Blacole.t
- PWS-Zbot.dx
Changes for v12.1.0.931 - v12.1.0.936
- New Detections:
- Generic-PWS!CPL
- Generic-PWS!rtf
- PWS-FACH
- PWS-FBNX
- PWS-FBOI.dr
- PWS-FBOJ
- PWS-ZBot.gen.auz
- PWS-ZBot.gen.ava
- PWS-ZBot.gen.avd
- PWS-ZBot.gen.ave
- T-PWS-BLJ
- Enhanced Detections:
- Generic PWS.o
- Generic.sq
Changes for v12.1.0.930 - v12.1.0.931
- Enhanced Detections:
- FakeAlert-IN
- Generic.sq
- PWS-ZBot.gen.aul
- PWS-Zbot.dx
- Ransom-O
- W32/Autorun.worm.c
Changes for v12.1.0.924 - v12.1.0.930
- New Detections:
- Downloader-BPJ.gen.a
- Encoded Executable
- Exploit-PDF!Blacole.dx
- Exploit-SWF!Blacole.dx
- FakeAlert.dx
- Generic.Miuref.dx
- Generic.Upatre.dx
- Generic.dam
- Generic.iu
- Generic.iv
- Generic.ix
- Generic.iy
- Generic.iz
- Generic.ja
- Generic.jb
- Generic.jc
- Generic.jd
- Generic.je
- Generic.jf
- Generic.jg
- Generic.jh
- Generic.ji
- Generic.jj
- Generic.jk
- Generic.jl
- Generic.jm
- Generic.jn
- Generic.jo
- Generic.jr
- Generic.js
- Generic.jt
- Generic.ju
- Generic.jv
- Generic.jw
- Generic.jz
- Generic.ka
- Generic.kb
- Generic.kc
- Generic.kd
- Generic.ke
- Generic.kf
- Generic.kg
- Generic.kh
- Generic.ki
- Generic.kj
- Generic.kl
- Generic.km
- Generic.kn
- Generic.ko
- Generic.kq
- Generic.kr
- Generic.ks
- Generic.kt
- Generic.ku
- Generic.kv
- Generic.kw
- Generic.kx
- Generic.ky
- Generic.kz
- Generic.la
- Generic.lb
- Generic.lc
- Generic.ld
- Generic.le
- Generic.lf
- Generic.lg
- Generic.lh
- Generic.li
- Generic.lm
- Generic.ln
- Generic.lo
- Generic.lp
- Generic.lq
- Generic.lr
- Generic.ls
- Generic.lt
- Generic.lu
- Generic.lv
- Generic.lw
- Generic.ly
- Generic.lz
- Generic.ma
- Generic.mb
- Generic.mc
- Generic.md
- Generic.me
- Generic.mg
- Generic.mh
- Generic.mi
- Generic.mj
- Generic.mk
- Generic.ml
- Generic.mm
- Generic.mn
- Generic.mo
- Generic.mp
- Generic.mq
- Generic.mr
- Generic.ms
- Generic.mt
- Generic.mu
- Generic.mv
- Generic.mw
- Generic.mx
- Generic.my
- Generic.mz
- Generic.na
- Generic.nb
- Generic.nc
- Generic.nd
- Generic.ne
- Generic.nf
- Generic.ng
- Generic.nh
- Generic.ni
- Generic.nj
- Generic.nk
- Generic.nl
- Generic.nm
- Generic.nn
- Generic.no
- Generic.np
- Generic.nq
- Generic.nr
- Generic.ns
- Generic.nt
- Generic.nu
- Generic.nv
- Generic.nw
- Generic.nx
- Generic.ny
- Generic.nz
- Generic.oa
- Generic.ob
- Generic.oc
- Generic.od
- Generic.oe
- Generic.of
- Generic.og
- Generic.oh
- Generic.oi
- Generic.oj
- Generic.ok
- Generic.ol
- Generic.om
- Generic.on
- Generic.oo
- Generic.op
- Generic.oq
- Generic.or
- Generic.os
- Generic.ot
- Generic.ou
- Generic.ov
- Generic.ow
- Generic.ox
- Generic.oy
- Generic.oz
- Generic.pa
- Generic.pb
- Generic.pc
- Generic.pd
- Generic.pe
- Generic.pf
- Generic.pg
- Generic.ph
- Generic.pi
- Generic.pj
- Generic.pk
- Generic.pl
- Generic.pm
- Generic.pn
- Generic.po
- Generic.pp
- Generic.pq
- Generic.pr
- Generic.ps
- Generic.pt
- Generic.pu
- Generic.pw
- Generic.px
- Generic.py
- Generic.pz
- Generic.qa
- Generic.qb
- Generic.qc
- Generic.qd
- Generic.qe
- Generic.qf
- Generic.qg
- Generic.qi
- Generic.qj
- Generic.qk
- Generic.ql
- Generic.qm
- Generic.qn
- Generic.qo
- Generic.qp
- Generic.qq
- Generic.qr
- Generic.qs
- Generic.qt
- Generic.qu
- Generic.qv
- Generic.qw
- Generic.qx
- Generic.qy
- Generic.qz
- Generic.ra
- Generic.rb
- Generic.rc
- Generic.rd
- Generic.re
- Generic.rf
- Generic.rg
- Generic.rh
- Generic.ri
- Generic.rj
- Generic.rk
- Generic.rl
- Generic.rm
- Generic.rv
- Generic.rw
- Generic.rx
- Generic.ry
- Generic.rz
- Generic.sa
- Generic.sb
- Generic.sc
- Generic.sd
- Generic.se
- Generic.sg
- Generic.sh
- Generic.si
- Generic.sj
- Generic.sk
- Generic.sl
- Generic.sm
- Generic.sn
- Generic.so
- Generic.sp
- Generic.sq
- Generic.sr
- Generic.ss
- Generic.st
- Generic.su
- Generic.sv
- JS/Blacole.dx
- JV/Blacole.dx
- PWS-Zbot.dx
- PWS-Zbot.dx!rar
- PWS-Zbot.dx!zip
- Ransom.dx
- Suspicious Keygen!rar
- Trojan-SkyHook
- Upatre.dx!zip
- W32/Generic.worm!irc
- W32/Generic.worm.aa
- W32/Generic.worm.ab
- W32/Generic.worm.ac
- W32/Generic.worm.ad
- W32/Generic.worm.ae
- W32/Generic.worm.af
- W32/Generic.worm.ag
- W32/Generic.worm.h
- W32/Generic.worm.i
- W32/Generic.worm.j
- W32/Generic.x
- W32/Generic.y
- W32/Generic.z
- ransom.dx
- with fishy extension
- ~T-SUS-BT
- ~T-SUS-BU
- ~T-SUS-BV
- Enhanced Detections:
- Adware-Crossrider
- Exploit-PDF.b.gen
- FakeAlert.dx
- Generic.dam
- Generic.dx
- Generic.it
- Generic.oh
- Generic.on
- Generic.ow
- Generic.rk
- Generic.so
- Generic.sp
- Generic.sq
- Generic.sr
- Generic.st
- Generic.su
- JV/Blacole.dx
- PWS-ZBot.gen.aux
- PWS-Zbot
- PWS-Zbot.dx
- PWS-Zbot.dx!zip
- PWS-Zbot.gen.oj
- Ransom.dx
- Trojan-SkyHook
- Upatre.dx!zip
- ZeroAccess
- ransom.dx
Changes for v12.1.0.921 - v12.1.0.924
- Enhanced Detections:
- Crossrider
- PWS-Zbot.gen.oj
Changes for v12.1.0.907 - v12.1.0.908
- New Detections:
- W64/Expiro.bb
Changes for v12.1.0.901 - v12.1.0.907
- Enhanced Detections:
- W32/Autorun.worm.c
Changes for v12.1.0.898 - v12.1.0.901
- Enhanced Detections:
- Crossrider
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
Changes for v12.1.0.893 - v12.1.0.898
- Enhanced Detections:
- Adware-OutBrowse
- Adware-SweetIM
Changes for v12.1.0.892 - v12.1.0.893
- New Detections:
- Luckyleap
- Enhanced Detections:
- Adware-OutBrowse
- Crossrider
- W32/Autorun.worm.c
Changes for v12.1.0.891 - v12.1.0.892
- Enhanced Detections:
- Generic.it
- PUP-FGB
- PWS-Zbot.gen.oj
- W32/Mariofev!mem
Changes for v12.1.0.888 - v12.1.0.891
- New Detections:
- PowerPack
- Enhanced Detections:
- Adware-BetterSurf
- Exploit-CVE2010-0188
- PWS-ZBot.gen.aul
Changes for v12.1.0.887 - v12.1.0.888
- Enhanced Detections:
- Adware-SweetIM
- Exploit-CVE2012-0158
Changes for v12.1.0.884 - v12.1.0.887
- Enhanced Detections:
- Adware-OutBrowse
- Crossrider
- Generic.it
- PWS-Zbot.gen.alh
- PWS-Zbot.gen.oj
- W32/XDocCrypt.b
Changes for v12.1.0.883 - v12.1.0.884
- Enhanced Detections:
- Adware-OutBrowse
- Crossrider
- Exploit-PDF.b.gen
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.agz
- PWS-Zbot.gen.alh
- PWS-Zbot.gen.ana
- PWS-Zbot.gen.anj
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
Changes for v12.1.0.879 - v12.1.0.883
- Enhanced Detections:
- Generic Downloader.z
Changes for v12.1.0.878 - v12.1.0.879
- Enhanced Detections:
- Adware-OutBrowse
- Generic Downloader.z
- PWS-ZBot.gen.auh
- PWS-Zbot.gen.oj
- W32/Conficker.worm!job
Changes for v12.1.0.877 - v12.1.0.878
- Enhanced Detections:
- PWS-Zbot.gen.oj
- VBS/FakePAV
- W32/XDocCrypt.a
- W32/XDocCrypt.a!rem
Changes for v12.1.0.876 - v12.1.0.877
- Enhanced Detections:
- Crossrider
Changes for v12.1.0.875 - v12.1.0.876
- Enhanced Detections:
- Generic Downloader.z
- PWCrack-PWDump
- PWS-ZBot.gen.aul
- PWS-ZBot.gen.aux
- W32/Autorun.worm.c
Changes for v12.1.0.872 - v12.1.0.875
- New Detections:
- SuspendAliasProcessesCLIB
- Enhanced Detections:
- Generic Downloader.z
- RemoveMaliciousThreadsCLIB
- W32/Conficker.worm
- cleanIFEOCLIB
- cleanPoliciesCLIB
- killdllCLIB
Changes for v12.1.0.871 - v12.1.0.872
- Enhanced Detections:
- Adware-BetterSurf
- Adware-Bprotect
- Adware-SweetIM
Changes for v12.1.0.869 - v12.1.0.871
- Enhanced Detections:
- Adware-BetterSurf
- Crossrider
- Generic Downloader.z
- JS/PornPopup
- PWS-ZBot.gen.auh
- PWS-Zbot.gen.apr
- PWS-Zbot.gen.oj
Changes for v12.1.0.865 - v12.1.0.869
- Enhanced Detections:
- Adware-SweetIM
- PWS-Zbot.gen.oj
- VBS/Autorun.worm.k
Changes for v12.1.0.862 - v12.1.0.865
- New Detections:
- FakeAlert-FTM
- Enhanced Detections:
- FakeAlert-DZ
- Generic Downloader.z
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
Changes for v12.1.0.860 - v12.1.0.862
- New Detections:
- W64/Expiro.ba
- Enhanced Detections:
- Adware-Bprotect
- Crossrider
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
- VBS/FakePAV
Changes for v12.1.0.858 - v12.1.0.860
- Enhanced Detections:
- PWS-Zbot.gen.oj
- ZeroAccess!cfg
Changes for v12.1.0.857 - v12.1.0.858
- Enhanced Detections:
- Generic Downloader.z
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
Changes for v12.1.0.854 - v12.1.0.857
- New Detections:
- VBS/FakePAV
- Enhanced Detections:
- Crossrider
- Generic Downloader.z
- W32/Autorun.worm.gt
Changes for v12.1.0.853 - v12.1.0.854
- Enhanced Detections:
- Generic Downloader.z
- W32/Autorun.worm.gen.za
Changes for v12.1.0.851 - v12.1.0.853
- New Detections:
- 32/Expiro.gen.ra
- Enhanced Detections:
- Adware-OutBrowse
- W32/Expiro.gen.r
Changes for v12.1.0.846 - v12.1.0.847
- New Detections:
- W32/Expiro.gen.r
- Enhanced Detections:
- PWS-Zbot.gen.oj
- W64/Expiro.b
Changes for v12.1.0.843 - v12.1.0.846
- Enhanced Detections:
- Adware-Bprotect
- Distromatic
- PWS-Zbot.gen.oj
- W32/Expiro.gen.p
- W64/Expiro.a
Changes for v12.1.0.839 - v12.1.0.843
- Enhanced Detections:
- Adware-BetterSurf
Changes for v12.1.0.837 - v12.1.0.839
- New Detections:
- Exploit-CVE2012-0158.k!rtf
- Enhanced Detections:
- Adware-OutBrowse
- Exploit-CVE2012-0158!rtf
- Generic FakeAlert.bw
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
Changes for v12.1.0.832 - v12.1.0.837
- New Detections:
- Distromatic
- Enhanced Detections:
- FakeAlert-SecurityTool.fo
- Mplug.gen.a
Changes for v12.1.0.830 - v12.1.0.832
- Enhanced Detections:
- Crossrider
- PWS-ZBot.gen.aul
- W32/Autorun.worm.c
- W32/Ramnit.e
Changes for v12.1.0.826 - v12.1.0.827
- New Detections:
- Crossrider
- Enhanced Detections:
- Adware-OutBrowse
- Crossrider
- HTool-JSP/WebShell
Changes for v12.1.0.825 - v12.1.0.826
- Enhanced Detections:
- Adware-OutBrowse
Changes for v12.1.0.824 - v12.1.0.825
- Enhanced Detections:
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
Changes for v12.1.0.823 - v12.1.0.824
- New Detections:
- PWS-ZBot.gen.avb
- PWS-ZBot.gen.avc
- Enhanced Detections:
- Exploit-CVE2012-0158
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mp
- JS/Exploit-Blacole.na
- PWS-Zbot.gen.oj
Changes for v12.1.0.818 - v12.1.0.823
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole.ml
Changes for v12.1.0.817 - v12.1.0.818
- New Detections:
- JS/PornPopup
- Enhanced Detections:
- FakeAlert-SecurityTool.fm
- Generic FakeAlert.n
- PWS-ZBot.gen.aux
Changes for v12.1.0.816 - v12.1.0.817
- Enhanced Detections:
- Adware-OutBrowse
- Generic Downloader.z
- HTool-JSPRat
Changes for v12.1.0.815 - v12.1.0.816
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- PWS-ZBot.gen.aul
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
Changes for v12.1.0.811 - v12.1.0.815
- New Detections:
- JS/Exploit-Blacole.na
- Enhanced Detections:
- HTool-JSPRat
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mt
- PWS-Zbot.gen.oj
Changes for v12.1.0.807 - v12.1.0.811
- Enhanced Detections:
- Adware-Bprotect
- FakeAlert-SecurityTool
- Generic Downloader.z
- PWS-Zbot
Changes for v12.1.0.806 - v12.1.0.807
- New Detections:
- HTool-JSP/WebShell
- Enhanced Detections:
- Exploit-CVE-2010-2568
- Generic Downloader.z
- HTool-JSP/WebShell
- JS/Exploit-Blacole.he
- PWS-Zbot.gen.oj
- W32/Autorun.worm.aabl!lnk
- W32/Conficker.worm!job
Changes for v12.1.0.802 - v12.1.0.806
- Enhanced Detections:
- Adware-BetterSurf
- Adware-Eorezo
- Exploit-PDF.rt.gen
- FakeAlert-IN
- Generic Downloader.z
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ml
Changes for v12.1.0.799 - v12.1.0.802
- Enhanced Detections:
- Downloader-CEW.ad
- Exploit-DcomRpc.b
- FakeAlert-AB.dldr
- FakeAlert-AG
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- FakeAlert-SecurityTool.ab
- FakeAlert-Y
- Generic Downloader.z
- Generic FakeAlert
- Generic PWS.agq
- Generic.it
- Generic.iw
- Generic.jp
- Generic.jq
- Generic.jx
- Generic.jy
- Generic.kk
- Generic.kp
- Generic.lx
- Generic.mf
- PWS-Zbot.gen.acz
- PWS-Zbot.gen.and
- PWS-Zbot.gen.oj
- SkyWiper!Cert
- W32/Autorun.worm.aabl
- W32/Autorun.worm.gt
- W32/Autorun.worm.zm
- W32/Conficker.worm
- W32/Rimecud
- W32/Sdbot.worm
- ZeroAccess.ce
Changes for v12.1.0.798 - v12.1.0.799
- New Detections:
- HTool-JSPRat
- Enhanced Detections:
- DirectDownminer
- Generic Downloader.z
- W32/Autorun.worm.h
Changes for v12.1.0.797 - v12.1.0.798
- New Detections:
- Generic-PWS!CPL
- Generic-PWS!rtf
- Enhanced Detections:
- Exploit-PDF.rt.gen
- FakeAlert-SecurityTool.eb
- Generic Downloader.z
- PWS-ZBot.gen.aux
Changes for v12.1.0.796 - v12.1.0.797
- Enhanced Detections:
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mz
Changes for v12.1.0.795 - v12.1.0.796
- Enhanced Detections:
- PWS-ZBot.gen.aul
Changes for v12.1.0.790 - v12.1.0.791
- Enhanced Detections:
- Generic Downloader.z
- JS/Blacole-Redirect.u
- W32/Autorun.worm.c
Changes for v12.1.0.784 - v12.1.0.786
- New Detections:
- DirectDownminer
- Enhanced Detections:
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.l
- PWS-ZBot.gen.aux
Changes for v12.1.0.781 - v12.1.0.784
- Enhanced Detections:
- Generic PWS.yt.dr
- JS/Exploit-Blacole.l
- PWS-Zbot.gen.agz
- W32/Autorun.worm.c
- W32/Autorun.worm.hm
- W32/Conficker.worm!job
- W64/Expiro.a
Changes for v12.1.0.779 - v12.1.0.781
- Enhanced Detections:
- JS/Exploit-Blacole.l
- PWS-Zbot.gen.agz
- W32/Autorun.worm.c
- W32/Autorun.worm.hm
- W64/Expiro.a
Changes for v12.1.0.777 - v12.1.0.779
- Enhanced Detections:
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
- W32/Expiro.gen.p
- W64/Expiro.a
Changes for v12.1.0.776 - v12.1.0.777
- New Detections:
- JS/Downloader-FCV
- Enhanced Detections:
- Generic Downloader.z
- PWS-Zbot.gen.oj
- W32/Autorun.worm.hm
- W32/Expiro.gen.p
- W32/Sality!mem
Changes for v12.1.0.772 - v12.1.0.773
- Enhanced Detections:
- Exploit-CVE2012-0158
- Generic Downloader.z
- PWS-ZBot.gen.auz
Changes for v12.1.0.771 - v12.1.0.772
- Enhanced Detections:
- Adware-Eorezo
- Generic Downloader.z
- W32/Sality!mem
Changes for v12.1.0.769 - v12.1.0.771
- Enhanced Detections:
- FakeAlert-SecurityTool
- FakeAlert-SecurityTool.es
- JS/Exploit-Blacole.l
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
- W32/Conficker.worm.gen.b
- W32/Sality!mem
Changes for v12.1.0.766 - v12.1.0.769
- Enhanced Detections:
- Adware-OutBrowse
- Generic Downloader.z
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mx
- PWS-Zbot.gen.oj
- W32/Autorun.worm.h
- W32/Sality!mem
Changes for v12.1.0.765 - v12.1.0.766
- Enhanced Detections:
- Exploit-PDF.rt.gen
- Generic Downloader.z
- JS/Exploit-Blacole.eu
Changes for v12.1.0.763 - v12.1.0.765
- Enhanced Detections:
- Adware-MegaSearch
- Generic Downloader.z
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mp
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
- W64/Expiro.a
Changes for v12.1.0.760 - v12.1.0.763
- Enhanced Detections:
- Exploit-CVE2012-0158
- JS/Exploit-Blacole.my
- PWS-ZBot.gen.aul
- W32/Expiro.gen.p
Changes for v12.1.0.759 - v12.1.0.760
- Enhanced Detections:
- Adware-BetterSurf
- Adware-OutBrowse
- JS/Exploit-Blacole.my
Changes for v12.1.0.751 - v12.1.0.759
- New Detections:
- PWS-FBOI.dr
- Enhanced Detections:
- Downloader-BCS
Changes for v12.1.0.750 - v12.1.0.751
- New Detections:
- PWS-FBOJ
- Tool-NetCat
- Enhanced Detections:
- Adware-SweetIM
- FakeAlert-FHR
- Generic Downloader.z
- JS/Exploit-Blacole.my
- PWS-Zbot.gen.oc
- W32/Expiro.gen.p
Changes for v12.1.0.749 - v12.1.0.750
- New Detections:
- JS/Exploit-Blacole.my
- T-OBS-AGV
- Enhanced Detections:
- FakeAlert-SecurityTool.fv
- Generic FakeAlert
- WebexpEnhanced
Changes for v12.1.0.747 - v12.1.0.749
- New Detections:
- Adware-BetterSurf
- Adware-OutBrowse
- PUP-FGB
- PUP-FGC
- PUP-FGE
- PWS-FBNX
- Enhanced Detections:
- Generic Downloader.z
- Generic FakeAlert
- Generic VB.jb
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.gb
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.l
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mw
- JS/Exploit-Blacole.mx
- W32/Expiro.gen.p
Changes for v12.1.0.743 - v12.1.0.744
- New Detections:
- Backdoor-FBOY
- Enhanced Detections:
- Exploit-CVE2012-0507
- FakeAlert-SecurityTool.fa
- Generic Downloader.z
- PWS-ZBot.gen.aul
- PWS-Zbot
- W32/Autorun.worm.h
Changes for v12.1.0.742 - v12.1.0.743
- New Detections:
- JS/Exploit-Blacole.mx
- WebexpEnhanced
- Enhanced Detections:
- FakeAlert-SecurityTool.fa
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ml
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
Changes for v12.1.0.741 - v12.1.0.742
- Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.
- New Detections:
- JS/Exploit-Blacole.mw
- Enhanced Detections:
- FakeAlert-SecurityTool.fa
- Generic Downloader.z
- JS/Exploit-Blacole.gb
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.hu
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mu
- JS/Exploit-Blacole.mv
- PWS-ZBot.gen.auk
- PWS-ZBot.gen.auz
- PWS-ZBot.gen.ava
- TDSS.ag
- W32/Autorun.worm.h
- W32/Expiro.gen.p
- W64/Expiro.a
Changes for v12.1.0.740 - v12.1.0.741
- Enhanced Detections:
- FakeAlert-SecurityTool.fa
- Generic Downloader.z
- JS/Exploit-Blacole.gb
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.hu
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mu
- JS/Exploit-Blacole.mv
- PWS-ZBot.gen.auk
- PWS-ZBot.gen.auz
- PWS-ZBot.gen.ava
- TDSS.ag
- W32/Autorun.worm.h
- W32/Expiro.gen.p
- W64/Expiro.a
Changes for v12.1.0.735 - v12.1.0.740
- New Detections:
- Enhanced Detections:
- FakeAlert-SecurityTool.fa
- Generic Downloader.z
- JS/Exploit-Blacole.gb
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.hu
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mu
- JS/Exploit-Blacole.mv
- TDSS.ag
- W32/Autorun.worm.h
- W32/Expiro.gen.p
- W64/Expiro.a
Changes for v12.1.0.734 - v12.1.0.735
- New Detections:
- Enhanced Detections:
- FakeAlert-SecurityTool.fa
- Generic Downloader.z
- JS/Exploit-Blacole.gb
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mu
- W32/Autorun.worm.h
- W32/Expiro.gen.p
- W64/Expiro.a
Changes for v12.1.0.732 - v12.1.0.734
- Enhanced Detections:
- FakeAlert-SecurityTool.fa
- Generic Downloader.z
- JS/Exploit-Blacole.gb
- JS/Exploit-Blacole.ht
- W32/Autorun.worm.h
Changes for v12.1.0.729 - v12.1.0.732
- New Detections:
- Enhanced Detections:
- Generic Downloader.z
Changes for v12.1.0.726 - v12.1.0.729
- Enhanced Detections:
- PWS-Zbot
- W32/Sality.dr
Changes for v12.1.0.725 - v12.1.0.726
- Enhanced Detections:
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mp
- JS/Exploit-Blacole.mt
- W32/Autorun.worm.c
- W32/Expiro.gen.p
- W32/Sality
- W64/Expiro.a
- ZeroAccess.dr
Changes for v12.1.0.720 - v12.1.0.725
- New Detections:
- W32/Expiro.gen.p
- W64/Expiro.a
- Enhanced Detections:
- Generic FakeAlert
Changes for v12.1.0.717 - v12.1.0.720
- New Detections:
- JS/Exploit-Blacole.mv
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole.hu
Changes for v12.1.0.711 - v12.1.0.717
- New Detections:
- Adware-BSurf
- W32/Dexter
- Enhanced Detections:
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.ms
Changes for v12.1.0.709 - v12.1.0.711
- New Detections:
- JS/Exploit-Blacole.mu
- PWS-ZBot.gen.ava
- Enhanced Detections:
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.hu
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.mi
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mr
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
Changes for v12.1.0.708 - v12.1.0.709
- Enhanced Detections:
- PWS-Zbot.gen.oj
Changes for v12.1.0.706 - v12.1.0.708
- New Detections:
- JS/Exploit-Blacole.mt
- Enhanced Detections:
- Exploit-CVE2012-0507
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mp
- W32/Autorun.worm.eu
Changes for v12.1.0.703 - v12.1.0.706
- New Detections:
- Htool-Relayd
- Enhanced Detections:
- Generic Downloader.z
- Generic VB.jb
- PWS-Zbot.gen.oj
Changes for v12.1.0.700 - v12.1.0.703
- New Detections:
- JS/Exploit-Blacole.ms
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole.mi
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mp
- PWS-ZBot.gen.auz
- PWS-Zbot.gen.oj
Changes for v12.1.0.695 - v12.1.0.700
- New Detections:
- JS/Exploit-Blacole.mr
- Enhanced Detections:
- Adware-Bprotect
- Adware-Monetizer
- Adware-SweetIM
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.hu
- JS/Exploit-Blacole.mi
- JS/Exploit-Blacole.mp
- PWS-Zbot.gen.ds
- PWS-Zbot.gen.oj
Changes for v12.1.0.690 - v12.1.0.695
- Enhanced Detections:
- FakeAlert-AVPSec!env.g
- False Digisig present
- Generic FakeAlert.n
- PWS-Zbot.gen.oj
Changes for v12.1.0.685 - v12.1.0.690
- New Detections:
- Adware-Monetizer
- Enhanced Detections:
- Generic PWS.yt.dr
- JS/Exploit-Blacole.ht
- JV/Exploit-Blacole
Changes for v12.1.0.683 - v12.1.0.685
- New Detections:
- Adware-SweetIM
- PWS-ZBot.gen.auz
- Enhanced Detections:
- W32/Autorun.worm.c
Changes for v12.1.0.680 - v12.1.0.683
- Enhanced Detections:
- FakeAlert-IN
- Generic Downloader.z
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mp
- JS/Exploit-Blacole.mq
- PWS-ZBot.gen.aux
- PWS-Zbot
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
- W32/Autorun.worm.hm
- ZeroAccess.d
Changes for v12.1.0.675 - v12.1.0.680
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mp
- PWS-Zbot.gen.oj
Changes for v12.1.0.669 - v12.1.0.675
- Enhanced Detections:
- FakeAlert-FHR
- Generic.gl
- JS/Exploit-Blacole.mn
- JS/Exploit-Blacole.mo
- PWS-ZBot.gen.aux
- VBS/Autorun.worm.k
- Vundo
Changes for v12.1.0.663 - v12.1.0.669
- Enhanced Detections:
- FakeAlert-AVPSec!env.g
- Generic.gl
- JS/Exploit-Blacole!heur
- PWS-ZBot.gen.auq
- PWS-ZBot.gen.aux
- W32/Autorun.worm.h
Changes for v12.1.0.658 - v12.1.0.663
- Enhanced Detections:
- PWS-ZBot.gen.auk
- PWS-Zbot.gen.oj
Changes for v12.1.0.654 - v12.1.0.658
- New Detections:
- DriverPack
- JS/Exploit-Blacole.mq
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ml
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
- W32/Autorun.worm.g
Changes for v12.1.0.652 - v12.1.0.654
- Enhanced Detections:
- Exploit-CVE2012-0158
- Generic Downloader.z
- JS/Exploit-Blacole.ml
- PWS-Zbot
- PWS-Zbot.gen.oj
- ZeroAccess.d
Changes for v12.1.0.649 - v12.1.0.652
- Enhanced Detections:
- Adware-Eorezo
- Generic VB.iv
- JS/Exploit-Blacole.ml
- PWS-ZBot.gen.auk
Changes for v12.1.0.648 - v12.1.0.649
- New Detections:
- JS/Exploit-Blacole.mp
- Enhanced Detections:
- JS/Exploit-Blacole.cw
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mm
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
- W32/Autorun.worm.h
Changes for v12.1.0.642 - v12.1.0.648
- New Detections:
- JS/Exploit-Blacole.mn
- JS/Exploit-Blacole.mo
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ml
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
Changes for v12.1.0.639 - v12.1.0.642
- New Detections:
- T-PWS-BLJ
- Enhanced Detections:
- 1
- Adware-Bprotect
- Generic Downloader.z
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
Changes for v12.1.0.636 - v12.1.0.639
- New Detections:
- JS/Exploit-Blacole.mm
- Toolbar-Inbox
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole.cw
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ip
- JS/Exploit-Blacole.mi
- JS/Exploit-Blacole.ml
- JV/Exploit-Blacole.t
- PWS-Zbot.gen.oj
Changes for v12.1.0.634 - v12.1.0.636
- Enhanced Detections:
- Adware-Bprotect
- PWS-ZBot.gen.auk
- PWS-ZBot.gen.aux
Changes for v12.1.0.632 - v12.1.0.634
- New Detections:
- JS/Exploit-Blacole.ml
- RAR-Exploit
- Enhanced Detections:
- Exploit-CVE2012-0158
- Exploit-PDF.rt.gen
- FakeAlert-DZ
- FakeAlert-SecurityTool
- FakeAlert-WinWebSec
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.mj
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
- ZeroAccess
Changes for v12.0.0.629 - v12.1.0.632
- New Detections:
- JS/Exploit-Blacole.ml
- RAR-Exploit
- Enhanced Detections:
- FakeAlert-SecurityTool
- FakeAlert-WinWebSec
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.mj
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
- ZeroAccess
Changes for v12.1.0.627 - v12.0.0.629
- New Detections:
- InstallMonster
- JS/Exploit-Blacole.mk
- Enhanced Detections:
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.mi
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
Changes for v12.1.0.624 - v12.1.0.627
- New Detections:
- Enhanced Detections:
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
Changes for v12.1.0.623 - v12.1.0.624
- New Detections:
- InstallCore
- Enhanced Detections:
- FakeAlert-SecurityTool
- PWS-Zbot.gen.oj
Changes for v12.1.0.622 - v12.1.0.623
- New Detections:
- FakeAlert-WinWebSec
- OSX/Baoba
- Enhanced Detections:
- Exploit-CVE2012-0158
- FakeAlert-SecurityTool
- JS/Blacole-Exploit
- JS/Exploit-Blacole
- JS/Wonka
- PWS-Zbot.gen.oj
Changes for v12.1.0.618 - v12.1.0.622
- New Detections:
- JS/Exploit-Blacole.mj
- Enhanced Detections:
- Adware-SaveShare
- JS/Exploit-Blacole.mc
- PWS-ZBot.gen.auh
- PWS-ZBot.gen.auj
- PWS-Zbot.gen.oj
- VBObfus.g
- VBS/Autorun.worm.k
Changes for v12.0.0.612 - v12.1.0.618
- Enhanced Detections:
- Adware-DomaIQ
- Exploit-CVE2012-0158
- FakeAlert-DZ
- FakeAlert-SecurityTool
- JS/Exploit-Blacole.mh
- JS/Exploit-Blacole.mi
- JV/Exploit-Blacole.t
- Tool-ProcKill
Changes for v12.0.0.609 - v12.0.0.612
- New Detections:
- Adware-SaveShare
- BrainInstall
- JS/Exploit-Blacole.mi
- Enhanced Detections:
- BackDoor-FHI
- Exploit-CVE2012-0158
- Exploit-PDF.sb.gen
- FakeAlert-FRM
- FakeAlert-SecurityTool
- FakeAlert-SecurityTool.bt
- FakeAlert-SecurityTool.v
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.kg
- PWS-ZBot.gen.auh
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
- Vundo.gen.cg
- W32/Autorun.worm.c
- W32/Autorun.worm.dq
- W32/Autorun.worm.h
- ZeroAccess.cj
Changes for v12.0.0.608 - v12.0.0.609
- New Detections:
- Adware-SaveShare
- BrainInstall
- Enhanced Detections:
- BackDoor-FHI
- Exploit-PDF.sb.gen
- FakeAlert-FRM
- FakeAlert-SecurityTool
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
- Vundo.gen.cg
- W32/Autorun.worm.dq
- W32/Autorun.worm.h
Changes for v12.0.0.606 - v12.0.0.608
- New Detections:
- Ividi
- Enhanced Detections:
- BackDoor-FHI
- FakeAlert-SecurityTool
- FakeAlert-WinwebSecurity
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- PWS-ZBot.gen.aux
- PWS-ZBot.gen.auy
- PWS-Zbot.gen.oj
- ZeroAccess
Changes for v12.0.0.603 - v12.0.0.606
- Enhanced Detections:
- Generic Downloader.z
- PWS-Zbot.gen.oj
Changes for v12.0.0.600 - v12.0.0.603
- New Detections:
- GameEnix
- Iwin
- Joke-ArchSMS.f
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Generic Downloader.z
- JS/Exploit-Blacole.mh
- W32/Autorun.worm.c
- W32/Autorun.worm.gt
- W32/Rimecud.gen.de
- ZeroAccess!cfg
Changes for v12.0.0.595 - v12.0.0.600
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- FakeAlert-IN
- FakeAlert-SecurityTool
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.mf
- JS/Exploit-Blacole.mg
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
- W32/Polip!mem
Changes for v12.0.0.594 - v12.0.0.595
- New Detections:
- PWS-ZBot.gen.auy
- Ransom-FAC!lnk
- Ransom-FAD
- Ransom-FAE
- Ransom-FAF
- Enhanced Detections:
- Exploit-CVE2012-0158
- FakeAlert-FRM
Changes for v12.0.0.593 - v12.0.0.594
- New Detections:
- Maxiget
- UltraDownload
- Enhanced Detections:
- Adware-DomaIQ
- Exploit-CVE2012-0158
- FakeAlert-C
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- Linkun
- PWS-ZBot.gen.aux
- VBS/Autorun.worm.k
Changes for v12.0.0.589 - v12.0.0.593
- New Detections:
- Adware-Hebogo
- Enhanced Detections:
- FakeAlert-SecurityTool
Changes for v12.0.0.587 - v12.0.0.589
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- FakeAlert-SecurityTool
- PWS-Zbot.gen.oj
- VBS/Autorun.worm.k
- W32/Autorun.worm.c
- ZeroAccess
Changes for v12.0.0.585 - v12.0.0.587
- New Detections:
- Linkun
- Enhanced Detections:
- FakeAlert-SecurityTool
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.lq
- JS/Exploit-Blacole.me
- Medfos.e
- ZeroAccess
Changes for v12.0.0.583 - v12.0.0.585
- New Detections:
- Exploit-PDF.sb.gen
- JS/Exploit-Blacole.mh
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Exploit-PDF.rt.gen
- Exploit-PDF.ru.gen
- Exploit-PDF.rv.gen
- Exploit-PDF.rw.gen
- Exploit-PDF.rx.gen
- Exploit-PDF.ry.gen
- Exploit-PDF.rz.gen
- Exploit-PDF.sa.gen
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- PWS-Zbot.gen.oj
- W32/Autorun.worm.f
Changes for v12.0.0.575 - v12.0.0.583
- New Detections:
- JS/Exploit-Blacole.mg
- Tool-ProcKill
- Enhanced Detections:
- FakeAlert-SecurityTool
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- PWS-ZBot.gen.auw
- PWS-Zbot.gen.oc
- PWS-Zbot.gen.oj
- W32/Autorun.worm.aabp
- W32/Expiro.gen.o
- W64/Expiro
Changes for v12.0.0.573 - v12.0.0.575
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- Generic FakeAlert
- Generic FakeAlert.bw
- JS/Exploit-Blacole.ht
- PWS-Zbot.gen.oj
Changes for v12.0.0.572 - v12.0.0.573
- New Detections:
- FakeAlert-FRM
- JS/Exploit-Blacole.me
- Enhanced Detections:
- Exploit-CVE2011-3544
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit!JNLP.c
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.lq
- ZeroAccess!cfg
Changes for v12.0.0.569 - v12.0.0.572
- Enhanced Detections:
- Generic Downloader.z
- PWS-ZBot.gen.auv
- ZeroAccess!cfg
Changes for v12.0.0.568 - v12.0.0.569
- Enhanced Detections:
- Exploit-CVE2012-0158
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit!JNLP
- Medfos.e
- PWS-Zbot
- PWS-Zbot.gen.oj
- W32/Autorun.worm.aaet!lnk
- W32/Autorun.worm.c
- W32/Rimecud
Changes for v12.0.0.559 - v12.0.0.568
- New Detections:
- Adware-iBryte
- Exploit-PDF.rw.gen
- Exploit-PDF.rx.gen
- Exploit-PDF.ry.gen
- Exploit-PDF.rz.gen
- Exploit-PDF.sa.gen
- Enhanced Detections:
- FakeAlert-SecurityTool
- JS/Exploit!JNLP.c
- JS/Exploit-Blacole!heur
- PWS-Zbot
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
- W32/Autorun.worm.i
- ZeroAccess
Changes for v12.0.0.555 - v12.0.0.559
- Exploit-PDF.rt.gen
- Exploit-PDF.ru.gen
- Exploit-PDF.rv.gen
- JS/Exploit-Blacole.mc
- JS/Exploit-Blacole.md
- Enhanced Detections:
- Downloader-CJX.gen.g
- Generic Downloader.z
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- PWS-ZBot.gen.aul
- PWS-ZBot.gen.aut
- PWS-Zbot.gen.oj
- W32/Autorun.worm.h
- ZeroAccess
Changes for v12.0.0.553 - v12.0.0.555
- New Detections:
- PWS-ZBot.gen.auw
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole!heur
- PWS-ZBot.gen.aut
- W32/Autorun
- W32/Autorun.worm.bbj
Changes for v12.0.0.547 - v12.0.0.553
- Enhanced Detections:
- Exploit-CVE2012-0158
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Blacole-Redirect.u
- JS/Exploit!JNLP
- JS/Exploit!JNLP.c
Changes for v12.0.0.546 - v12.0.0.547
- Enhanced Detections:
- FakeAlert-SecurityTool
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.ht
Changes for v12.0.0.543 - v12.0.0.546
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- FakeAlert-SecurityTool
- JS/Exploit-Blacole!heur
- Medfos.e
- W32/Autorun.worm.c
Changes for v12.0.0.541 - v12.0.0.543
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- Generic VB.jb
- JS/Exploit!JNLP.c
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.mb
- Medfos.e
- PWS-ZBot.gen.auk
Changes for v12.0.0.539 - v12.0.0.541
- New Detections:
- PWS-ZBot.gen.auv
- W32/Autorun.worm.aaet!lnk
- Enhanced Detections:
- Downloader-BMN.gen.c
- FakeAlert-SecurityTool
- Generic Downloader.z
- PWS-ZBot.gen.auh
- W32/Autorun.worm.aaet
- W32/Autorun.worm.c
Changes for v12.0.0.538 - v12.0.0.539
- Enhanced Detections:
- Downloader-BMN.gen.c
- FakeAlert-SecurityTool
- PWS-Zbot.gen.oj
Changes for v12.0.0.537 - v12.0.0.538
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.gl
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.lq
- JS/Exploit-Blacole.mb
- PWS-Zbot.gen.oj
Changes for v12.0.0.535 - v12.0.0.537
- Enhanced Detections:
- Exploit-CVE2012-0507
- FakeAlert-AB!htm
- JS/Exploit-Blacole.eu
- PWS-ZBot.gen.aut
- W32/Autorun.worm.c
Changes for v12.0.0.531 - v12.0.0.535
- New Detections:
- PWS-ZBot.gen.aut
- Enhanced Detections:
- FakeAlert-SecurityTool
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.hu
Changes for v12.0.0.530 - v12.0.0.531
- Enhanced Detections:
- FakeAlert-SecurityTool
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.mb
- PWS-ZBot.gen.auq
- PWS-Zbot.gen.oj
- VBS/Autorun.worm.k
- W32/Autorun.worm.c
- ZeroAccess!cfg
Changes for v12.0.0.529 - v12.0.0.530
- New Detections:
- JS/Exploit-Blacole.mb
- Enhanced Detections:
- Exploit-CVE2012-0158
- JS/Exploit!JNLP.h
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.gl
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.lq
- ZeroAccess!cfg
Changes for v12.0.0.524 - v12.0.0.529
- Enhanced Detections:
- Exploit-CVE2012-0158.i!rtf
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit!JNLP.h
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.lz
- JV/Exploit-Blacole
- Medfos.e
- PWS-Zbot.gen.ata
Changes for v12.0.0.523 - v12.0.0.524
- Enhanced Detections:
- Exploit-CVE2012-0158.j!rtf
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.hu
- JS/Exploit-Blacole.ko
- JS/Exploit-Blacole.lz
- PWS-OnlineGames.lw
- PWS-ZBot.gen.aul
- PWS-ZBot.gen.aun
- PWS-ZBot.gen.auo
- PWS-ZBot.gen.aup
- PWS-Zbot.gen.oj
- Swrort.d
Changes for v12.0.0.521 - v12.0.0.523
- Enhanced Detections:
- Downloader-BCS
- Exploit-CVE2012-0158
- FakeAlert-SecurityTool
- FakeAlert-XPA!env
- FakeAlert-Y
- Generic Downloader.z
- Medfos.e
- PWS-Zbot
- PWS-Zbot.gen.oj
- W32/Autorun.worm.bf
- W32/Autorun.worm.c
- W64/Expiro
- ZeroAccess.cj
Changes for v12.0.0.514 - v12.0.0.521
- New Detections:
- JS/Exploit!JNLP.h
- Enhanced Detections:
- Exploit-CVE2010-0188
- Generic FakeAlert
- JS/Exploit!JNLP.f
- JS/Exploit!JNLP.g
- JS/Exploit-Blacole!heur
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
- ZeroAccess!cfg
Changes for v12.0.0.513 - v12.0.0.514
- Enhanced Detections:
- Generic Downloader.z
- Generic FakeAlert
- JS/Exploit-Blacole.is
- PWS-Zbot
- ZeroAccess!cfg
- ZeroAccess.ia
Changes for v12.0.0.512 - v12.0.0.513
- New Detections:
- Exploit-CVE2012-0158.j!rtf
- PWS-ZBot.gen.auq
- Enhanced Detections:
- DNSChanger.d
- JS/Blacole-Exploit
- JS/Exploit!JNLP.c
- JS/Exploit!JNLP.f
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ia
- JS/Exploit-Blacole.ma
- PWS-ZBot.gen.aul
- PWS-ZBot.gen.aum
- PWS-ZBot.gen.auo
Changes for v12.0.0.508 - v12.0.0.512
- New Detections:
- PWS-ZBot.gen.aup
- Enhanced Detections:
- Generic Downloader.z
- ZeroAccess!cfg
Changes for v12.0.0.506 - v12.0.0.508
- New Detections:
- PWS-ZBot.gen.aun
- PWS-ZBot.gen.auo
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- W32/Autorun.worm.c
Changes for v12.2.0.504 - v12.0.0.506
- Enhanced Detections:
- Generic Downloader.z
- Generic FakeAlert
- Generic FakeAlert.bw
- JS/Blacole-Redirect.ag
- W32/Virut
Changes for v12.0.0.503 - v12.2.0.504
- New Detections:
- JS/Exploit!JNLP.g
- Enhanced Detections:
- Exploit-CVE2012-0158
- Generic Downloader.z
- Generic FakeAlert.bw
- JS/Exploit!JNLP.f
- PWS-ZBot.gen.auh
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
- W32/Autorun.worm.g
- W32/Virut
- ZeroAccess
Changes for v12.0.0.501 - v12.0.0.503
- New Detections:
- PWS-ZBot.gen.aum
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic Downloader.ic
- W64/Expiro
Changes for v12.0.0.499 - v12.0.0.501
- New Detections:
- JS/Exploit-Blacole.ma
- Enhanced Detections:
- Generic Downloader.z
- Generic FakeAlert.bw
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.hu
- JS/Exploit-Blacole.ia
- JS/Exploit-Blacole.is
- JS/Exploit-Blacole.ko
- JS/Exploit-Blacole.lz
- PWS-Zbot.gen.oj
- W32/Expiro.gen.o
Changes for v12.0.0.498 - v12.0.0.499
- Enhanced Detections:
- Adware-Bprotect
- Exploit-CVE2012-0158!rtf
- FakeAlert-Rena.bu
- Generic Downloader.z
- JS/Exploit!JNLP.c
- PWS-Zbot
- ZeroAccess.c
Changes for v12.0.0.497 - v12.0.0.498
- New Detections:
- JS/Blacole-Redirect.aj
- Enhanced Detections:
- Exploit-CVE2010-2568
- FakeAlert-SecurityTool.gf
- FakeAlert-WinwebSecurity
- Generic Downloader.z
- JS/Exploit!JNLP.f
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ko
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lz
- PWS-ZBot.gen.aul
- PWS-Zbot
- PWS-Zbot.gen.oc
Changes for v12.0.0.493 - v12.0.0.497
- New Detections:
- Adware-InstallQ
- Enhanced Detections:
- Exploit-CVE2012-0158
- FakeAlert-SecurityTool
- Generic Downloader.z
- Medfos.e
- PWS-ZBot.gen.auj
- PWS-ZBot.gen.auk
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
- ZeroAccess.eh
- ZeroAccess.ia
Changes for v12.0.0.490 - v12.0.0.493
- New Detections:
- Adware-InstallQ
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- ZeroAccess.eh
Changes for v12.0.0.487 - v12.0.0.490
- New Detections:
- JS/Exploit-Blacole.lz
- Enhanced Detections:
- Exploit-PDF.b.gen
- Generic Downloader.z
- Generic FakeAlert.cp
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.hu
- JS/Exploit-Blacole.ju
- JS/Exploit-Blacole.ko
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
- W32/Autorun.worm.h
- ZeroAccess!cfg
Changes for v12.0.0.485 - v12.0.0.487
- New Detections:
- PWS-ZBot.gen.aul
- Enhanced Detections:
- JS/Exploit-Blacole!heur
- W64/Expiro
- ZeroAccess
Changes for v12.0.0.483 - v12.0.0.485
- New Detections:
- PWS-ZBot.gen.auj
- PWS-ZBot.gen.auk
- Enhanced Detections:
- Exploit-CVE2012-0158
- FakeAlert-SecurityTool
Changes for v12.0.0.482 - v12.0.0.483
- Enhanced Detections:
- Exploit-CVE2012-0158
- Exploit-CVE2012-0158!rtf
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- FakeAlert-SecurityTool.fx
- Generic Downloader.z
- JS/Exploit!JNLP.f
- JS/Wonka
- PWS-Zbot.gen.oj
- ZeroAccess!cfg
Changes for v12.0.0.478 - v12.0.0.482
- Enhanced Detections:
- JS/Exploit!JNLP.f
- JS/Exploit-Blacole.cw
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.hu
- JS/Exploit-Blacole.ju
- Medfos.e
- W32/Autorun.worm.c
Changes for v12.0.0.473 - v12.0.0.478
- New Detections:
- Linux/Backdoor-Appmod.a
- Enhanced Detections:
- JS/Exploit-Blacole!heur
- Medfos.e
- PWS-Zbot
- PWS-Zbot.gen.oj
Changes for v11.0.0.466 - v12.0.0.473
- Enhanced Detections:
- Generic Downloader.z
Changes for v11.0.0.465 - v11.0.0.466
- Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit!JNLP.e
- VBS/Autorun.worm.k
- W32/Autorun.worm.c
Changes for v11.0.0.462 - v11.0.0.465
- New Detections:
- JS/Exploit!JNLP.f
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- JS/Exploit!JNLP
- PWS-Zbot
- W32/Autorun.worm.c
- W32/Autorun.worm.h
- W32/Rimecud
- ZeroAccess.cj
- ZeroAccess.dr
Changes for v11.0.0.456 - v11.0.0.462
- Enhanced Detections:
- Exploit-CVE2012-0158
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- JS/Exploit-Blacole.cw
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- PWS-Zbot.gen.ary
- PWS-Zbot.gen.oj
- W64/Expiro
Changes for v11.0.0.454 - v11.0.0.456
- Enhanced Detections:
- Generic FakeAlert.bw
- PWS-Zbot.gen.oc
- W32/Rimecud
Changes for v11.0.0.452 - v11.0.0.454
- Enhanced Detections:
- Exploit-CVE2012-0158.i!rtf
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic Downloader.z
- Generic FakeAlert.fz
- PWS-Zbot
- Vundo
- W32/Autorun.worm.c
- W64/Expiro
Changes for v11.0.0.450 - v11.0.0.452
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- Generic VB.jb
- HackTool-ZBotBuilder
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
- W32/Autorun.worm.eu
Changes for v11.0.0.446 - v11.0.0.450
- Enhanced Detections:
- Exploit-CVE2012-0158
- FakeAlert-SecurityTool
- Generic VB.jb
- JS/Exploit!JNLP.c
- PWS-Zbot.gen.oj
- ZeroAccess.dr
Changes for v11.0.0.441 - v11.0.0.446
- Enhanced Detections:
- Generic Downloader.z
- Generic FakeAlert.bw
- Generic VB.jb
- JS/Exploit!JNLP.c
- PWS-OnlineGames.a
- PWS-Zbot.gen.oc
- PWS-Zbot.gen.oj
- ZeroAccess.eh
- ZeroAccess.gh
Changes for v11.0.0.393 - v11.0.0.441
- New Detections:
- JS/Exploit!JNLP.e
- W32/Expiro.gen.o
- W64/Expiro
- Enhanced Detections:
- Exploit-CVE2012-0158.h!rtf
- Generic Downloader.z
- Generic VB.jb
- JS/Exploit!JNLP.c
- JS/Exploit-Blacole.le
Changes for v11.0.0.390 - v11.0.0.393
- New Detections:
- Toolbar-Browser
- Enhanced Detections:
- Generic FakeAlert.bw
- JS/Exploit-Blacole!heur
- PWS-Zbot
- PWS-Zbot.gen.ahr
- PWS-Zbot.gen.amz
- PWS-Zbot.gen.oj
- W32/Autorun.worm.g
- W32/Autorun.worm.hm
Changes for v11.0.0.388 - v11.0.0.390
- New Detections:
- Gapz.a
- W64/Gapz.a
- Enhanced Detections:
- JS/Blacole-Redirect.ag
- JS/Exploit!JNLP.c
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ip
- JV/Exploit-Blacole.t
- PWS-ZBot.gen.aug
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
- ZeroAccess
Changes for v11.0.0.384 - v11.0.0.388
- New Detections:
- JS/Exploit!JNLP.c
- PWS-ZBot.gen.auh
- PWS-ZBot.gen.aui
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- JS/Blacole-Redirect.ag
- JS/Exploit-Blacole
- JS/Exploit-Blacole!heur
- PWS-Zbot.gen.ary
- ZeroAccess.ia
Changes for v11.0.0.382 - v11.0.0.384
- New Detections:
- JS/Exploit-Blacole.b!heur
- JS/Exploit-Blacole.lw
- JS/Exploit-Blacole.lx
- JS/Exploit-Blacole.ly
- Enhanced Detections:
- Exploit-PDF.ca
- FakeAlert-SecurityTool
- Generic FakeAlert
- PWS-Zbot.gen.oc
- PWS-Zbot.gen.oj
Changes for v11.0.0.378 - v11.0.0.382
- Enhanced Detections:
- FakeAlert-SecurityTool
- FakeAlert-SecurityTool.gf
- JS/Exploit-Blacole
Changes for v11.0.0.372 - v11.0.0.378
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- JS/Exploit-Blacole
- JS/Redirector
- PWS-Zbot
- PWS-Zbot.gen.oj
- ZeroAccess
Changes for v11.0.0.366 - v11.0.0.369
- Enhanced Detections:
- Generic VB.jb
- JS/Exploit-Blacole!heur
- W32/Autorun.worm.aaeh
Changes for v11.0.0.362 - v11.0.0.366
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Festi.c
- Generic Downloader.z
- JS/Exploit!JNLP.a
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.lv
- PWS-Zbot.gen.oj
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.c
Changes for v11.0.0.360 - v11.0.0.362
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.a!heur
- JS/Exploit-Blacole.le
- PWS-OnlineGames.a
- PWS-Zbot.gen.oj
- W32/Autorun.worm.g
- W32/Conficker.worm
Changes for v11.0.0.357 - v11.0.0.360
- Enhanced Detections:
- Downloader-CJX.gen.aa
- Downloader-CJX.gen.ab
- Downloader-CJX.gen.ac
- Downloader-CJX.gen.s
- Downloader-CJX.gen.t
- Downloader-CJX.gen.z
- FakeAlert-AB
- FakeAlert-Rena.bu
- FakeAlert-Rena.gen!env
- Generic PWS.ahp
- JS/Exploit!JNLP.a
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.im
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lr
- JS/Exploit-Blacole.lt
- JS/Exploit-Blacole.lu
- PWS-Zbot.gen.asm
- Vundo
- W32/Autorun.worm.h
Changes for v11.0.0.355 - v11.0.0.357
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- JV/Exploit-Blacole
- Medfos.e
- PWS-Zbot.gen.vo
Changes for v11.0.0.344 - v11.0.0.355
- New Detections:
- JS/Exploit-Blacole.lv
- PWS-Zbot.gen.oj
- Enhanced Detections:
- BackDoor-BAC
- BackDoor-CSX
- BackDoor-CSY
- BackDoor-CUX
- BackDoor-CWD
- BackDoor-DIX
- Backdoor-BAC
- Backdoor-DSN
- Downloader-BAI
- FakeAlert-Rena.bu
- Festi
- Generic RootKit.a
- Generic RootKit.f
- Generic Rootkit.d
- HideVault!sys
- JS/Blacole-Redirect.ag
- JS/Exploit-Blacole.eu
- NTRootKit-J
- NTRootkit-Z
- PWS-Zbot.gen.asm
- Spy-Agent.bv
- Srizbi
- StartPage-KM
- VAnti
- W32/Almanahe
- W32/Nuwar
Changes for v11.0.0.341 - v11.0.0.344
- Enhanced Detections:
- Generic FakeAlert
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.lr
- JS/Exploit-Blacole.lt
- W32/XDoc
Changes for v11.0.0.338 - v11.0.0.341
- Enhanced Detections:
- Exploit-CVE2012-0158
- Generic Downloader.z
- JS/Exploit-Blacole.a!heur
Changes for v11.0.0.337 - v11.0.0.338
- New Detections:
- JS/Blacole-Redirect.ah
- Enhanced Detections:
- Exploit-CVE2012-0158
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic Downloader.z
- Generic FakeAlert.bw
- PWS-TravNet
Changes for v11.0.0.333 - v11.0.0.337
- Enhanced Detections:
- FakeAlert-Rena.bu
Changes for v11.0.0.332 - v11.0.0.333
- New Detections:
- PWS-TravNet
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic FakeAlert
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.c
Changes for v11.0.0.327 - v11.0.0.332
- Enhanced Detections:
- BackDoor-FHI
- FakeAlert-EQ.c
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.a!heur
Changes for v11.0.0.325 - v11.0.0.327
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- JS/Blacole-Redirect.ae
- PWS-Zbot
- W32/Rimecud
- W64/TDSS.d
- ZeroAccess
Changes for v11.0.0.323 - v11.0.0.325
- Enhanced Detections:
- BackDoor-EXZ
- BackDoor-FHI
- Downloader-FMJ
- Exploit-CVE2011-2462
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- PWS-OnlineGames.a
- PWS-ZBot.gen.aug
- W32/Autorun.worm.aaeh
Changes for v11.0.0.319 - v11.0.0.323
- New Detections:
- JS/Exploit!JNLP
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic Downloader.z
- Generic FakeAlert
- PWS-Zbot
Changes for v11.0.0.318 - v11.0.0.319
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- JS/Exploit-Blacole.aq
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.lr
- JS/Exploit-Blacole.lt
- PWS-OnlineGames.a
- PWS-Zbot.gen.acl
- PWS-Zbot.gen.asl
- ZeroAccess
Changes for v11.0.0.315 - v11.0.0.318
- New Detections:
- W32/XDoc
- Enhanced Detections:
- Generic FakeAlert
- Generic FakeAlert.bw
- Generic VB.jb
- JS/Exploit-Blacole
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lr
- PWS-Zbot.gen.ary
- VBS/Autorun.worm.aaaz
- ZeroAccess
Changes for v11.0.0.312 - v11.0.0.315
- New Detections:
- Exploit-CVE2012-0158.i!rtf
- JS/Exploit-Blacole.lu
- PWS-ZBot.gen.aug
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Blacole-Redirect.af
- JS/Blacole-Redirect.ag
- JS/Exploit-Blacole
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ld
- PWS-Zbot.gen.acl
- VBS/Autorun.worm.k
- ZeroAccess
Changes for v11.0.0.310 - v11.0.0.312
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.lr
- JS/Exploit-Blacole.ls
- PWS-Zbot.gen.agz
- PWS-Zbot.gen.aok
- PWS-Zbot.gen.arw
- W32/Rimecud
- ZeroAccess
Changes for v11.0.0.308 - v11.0.0.310
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic FakeAlert.bw
- JS/Blacole-Redirect.ac
- JS/Blacole-Redirect.ad
- JS/Blacole-Redirect.ae
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.lr
- JS/Exploit-Blacole.lt
- W32/Autorun.worm.c
- ZeroAccess
Changes for v11.0.0.305 - v11.0.0.308
- New Detections:
- JS/Blacole-Redirect.af
- JS/Blacole-Redirect.ag
- JS/Exploit-Blacole.lt
- W64/TDSS.d
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Blacole-Redirect.ab
- JS/Exploit-Blacole.aq
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lr
- JV/Exploit-Blacole.t
- ZeroAccess
Changes for v11.0.0.303 - v11.0.0.305
- Enhanced Detections:
- FakeAlert-Rena.bu
- Generic Downloader.z
- JS/Exploit-Blacole.jn
- Vundo
- ZeroAccess
Changes for v11.0.0.301 - v11.0.0.303
- Enhanced Detections:
- BackDoor-FHI
- FakeAlert-EQ.c
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic FakeAlert
- JS/Exploit-Blacole.ht
- PWS-Zbot.gen.atp
- VBS/Autorun.worm.k
- ZeroAccess
Changes for v11.0.0.299 - v11.0.0.301
- New Detections:
- Downloader-FKW
- Downloader-FMA
- Downloader-FMB
- Downloader-FMJ
- JS/Blacole-Redirect.ac
- JS/Blacole-Redirect.ad
- JS/Blacole-Redirect.ae
- Enhanced Detections:
- FakeAlert-Rena.bu
- Generic FakeAlert.bw
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ju
- JV/Exploit-Blacole
- PWS-Zbot
- W32/Xpaj.c
- ZeroAccess
Changes for v11.0.0.296 - v11.0.0.299
- New Detections:
- JS/Exploit-Blacole.lr
- JS/Exploit-Blacole.ls
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ld
- ZeroAccess
Changes for v11.0.0.293 - v11.0.0.296
- New Detections:
- JS/Blacole-Redirect.ab
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Exploit-MSExcel.k
- FakeAlert-MY.gen
- Generic Downloader.z
- JS/Exploit-Blacole
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lq
- W64/TDSS.f
- ZeroAccess
Changes for v11.0.0.289 - v11.0.0.293
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit-Blacole.lp
- PWS-Zbot.gen.ary
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.c
- ZeroAccess
Changes for v11.0.0.288 - v11.0.0.289
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Exploit-MSExcel.k
- JS/Exploit-Blacole
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ju
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.le
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.c
- W32/Autorun.worm.g
Changes for v11.0.0.286 - v11.0.0.288
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit-Blacole.le
- PWS-Zbot.gen.ary
Changes for v11.0.0.285 - v11.0.0.286
- Enhanced Detections:
- Exploit-CVE2011-2462
- Exploit-CVE2012-0158!rtf
- Exploit-CVE2012-0507
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit-Blacole.lo
- PWS-Zbot.gen.asm
- W32/Autorun.worm.aaeh
- ZeroAccess
Changes for v11.0.0.282 - v11.0.0.285
- Enhanced Detections:
- Generic.it
- JS/Blacole-Redirect
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.im
- JS/Exploit-Blacole.le
- W32/Autorun.worm.c
Changes for v11.0.0.278 - v11.0.0.282
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ld
- PWS-Zbot.gen.ary
- W32/Autorun.worm.bx
- W32/Autorun.worm.c
- W32/Autorun.worm.g
Changes for v11.0.0.276 - v11.0.0.278
- New Detections:
- PWS-OnlineGames.a
- Enhanced Detections:
- PWS-OnlineGames.a
- PWS-Zbot.gen.ary
- W32/Sdbot.worm
- ZeroAccess.dr
Changes for v11.0.0.267 - v11.0.0.276
- New Detections:
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.lq
- Enhanced Detections:
- Generic Downloader.z
- Generic VB.jb
- JS/Exploit-Blacole
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.le
- PWS-Zbot
- PWS-Zbot.gen.arw
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.g
- W32/Autorun.worm.gt
- ZeroAccess.cj
Changes for v11.0.0.266 - v11.0.0.267
- New Detections:
- JS/Exploit-Blacole!huer
- Enhanced Detections:
- Exploit-CVE2012-0158.h!rtf
- FakeAlert-D
- FakeAlert-SysDef
- Generic FakeAlert
- Generic FakeAlert.bw
- JS/Exploit-Blacole.le
- Medfos.e
- PWS-Zbot.gen.arw
- ZeroAccess
Changes for v11.0.0.250 - v11.0.0.266
- New Detections:
- Festi.c
- Enhanced Detections:
- Generic Downloader.z
- Generic FakeAlert
- JS/Blacole-Redirect.aa
- JV/Exploit-Blacole
- PWS-Zbot
- PWS-Zbot.gen.arw
- W32/Autorun.worm.aaeh
- ZeroAccess.ik
Changes for v11.0.0.249 - v11.0.0.250
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Exploit-CVE2012-0158.h!rtf
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ks
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lm
- JS/Exploit-Blacole.ln
- Medfos.e
- Vundo
- W32/Autorun.worm.aaeh
- ZeroAccess
- ZeroAccess.ij
Changes for v11.0.0.248 - v11.0.0.249
- New Detections:
- JS/Blacole-Redirect.aa
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- FakeAlert-SecurityTool
- PWS-Zbot.gen.arw
- Vundo
- W32/Autorun.worm.aaeh
- W32/Rimecud
- ZeroAccess
Changes for v11.0.0.244 - v11.0.0.248
- Enhanced Detections:
- FakeAlert-SecurityTool
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.le
- PWS-Zbot.gen.arw
- W32/Conficker.worm!job
- ZeroAccess
- ZeroAccess.hr
Changes for v11.0.0.239 - v11.0.0.244
- Enhanced Detections:
- Generic FakeAlert
- JS/Blacole-Redirect.z
- JS/Exploit-Blacole
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lf
- JS/Exploit-Blacole.lj
- JS/Exploit-Blacole.lk
- JS/Exploit-Blacole.ll
- PWS-Zbot
- PWS-Zbot.gen.aov
- PWS-Zbot.gen.arw
- PWS-Zbot.gen.ary
- ZeroAccess
- ZeroAccess.dr
Changes for v11.0.0.234 - v11.0.0.239
- Enhanced Detections:
- Generic BackDoor.zw
- JV/Exploit-Blacole
- PWS-Zbot.gen.arw
- PWS-Zbot.gen.atp
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.c
- W32/Rimecud
- W32/XDocCrypt.d
- ZeroAccess
Changes for v11.0.0.233 - v11.0.0.234
- New Detections:
- JS/Exploit-Blacole.ln
- W32/XDocCrypt.d
- ZeroAccess.ij
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Generic Downloader.z
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ks
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lm
- Medfos.e
- W32/Virut
- ZeroAccess
Changes for v11.0.0.228 - v11.0.0.233
- Enhanced Detections:
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.le
- PWS-Zbot.gen.arw
- ZeroAccess
- ZeroAccess.hr
- ZeroAccess.ii
Changes for v11.0.0.227 - v11.0.0.228
- Enhanced Detections:
- Exploit-CVE2011-1990
- Generic Downloader.z
- Generic FakeAlert
- JS/Exploit-Blacole
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lf
- PWS-Zbot.gen.arw
- W32/Autorun.worm.aaeh
- ZeroAccess
Changes for v11.0.0.226 - v11.0.0.227
- New Detections:
- JS/Exploit-Blacole.lm
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Generic BackDoor.zw
- Generic Downloader.z
- Generic FakeAlert.bz!lnk
- JS/Exploit-Blacole
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.lf
- PWS-Zbot.gen.ary
- W32/Autorun.worm.c
- W32/Rimecud
- ZeroAccess
- ZeroAccess.hr
Changes for v11.0.0.224 - v11.0.0.226
- New Detections:
- ZeroAccess.ii
- Enhanced Detections:
- FakeAlert-SysDef
- Generic Downloader.z
- Generic!atr
- JS/Exploit-Blacole
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.kh
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.le
- PWS-Zbot.gen.any
- PWS-Zbot.gen.are
- PWS-Zbot.gen.arw
- PWS-Zbot.gen.ary
- PWS-Zbot.gen.aty
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.c
- W32/Autorun.worm.g
- W32/Lovgate
- ZeroAccess
- ZeroAccess.ig
Changes for v11.0.0.220 - v11.0.0.224
- Enhanced Detections:
- Generic Downloader.z
- Generic FakeAlert
- Generic VB.jb
- JS/Exploit-Blacole.gq
- JS/Exploit-Blacole.kt
- PWS-Zbot.gen.any
- PWS-Zbot.gen.arw
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.g
- ZeroAccess
- ZeroAccess.hr
Changes for v11.0.0.216 - v11.0.0.220
- New Detections:
- JS/Exploit-Blacole.ll
- Enhanced Detections:
- Exploit-CVE2012-0158.h!rtf
- FakeAlert-Rena.by
- FakeAlert-Rena.cj
- FakeAlert-SecurityTool.fl
- FakeAlert-SecurityTool.fz
- FakeAlert-SecurityTool.gf
- Generic FakeAlert
- Generic Rootkit.d
- PWS-Zbot
- PWS-Zbot.gen.any
- PWS-Zbot.gen.arw
- W32/Lovgate
- ZeroAccess
- ZeroAccess.hr
- ZeroAccess.ih
Changes for v11.0.0.215 - v11.0.0.216
- New Detections:
- JS/Blacole-Redirect.z
- JS/Exploit-Blacole.lk
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole.kk
- PWS-Zbot.gen.any
- W32/Autorun.worm.aaeh
- W32/Rimecud
Changes for v11.0.0.213 - v11.0.0.215
- New Detections:
- Keylog-FAE
- Enhanced Detections:
- FakeAlert-SecurityTool
- FakeAlert-SecurityTool.fa
- FakeAlert-SecurityTool.fl
- FakeAlert-SecurityTool.fn
- FakeAlert-SecurityTool.ft
- FakeAlert-SecurityTool.ga
- Generic PWS.xa
- PWS-Zbot.gen.any
- PWS-Zbot.gen.arw
- VBS/Autorun.worm.k
- W32/Autorun.worm.c
- W32/Lovgate
- ZeroAccess.dr
- ZeroAccess.ig
Changes for v11.0.0.210 - v11.0.0.213
- New Detections:
- ZeroAccess.ih
- Enhanced Detections:
- FakeAlert-Rena.ck
- FakeAlert-Rena.cm
- FakeAlert-Rena.cn
- FakeAlert-Rena.co
- Generic PWS.aac
- PWS-Zbot
- PWS-Zbot.gen.any
- PWS-Zbot.gen.arw
- Vundo
- W32/Autorun.worm.aaeh
- ZeroAccess
Changes for v11.0.0.209 - v11.0.0.210
- New Detections:
- BackDoor-EJG
- JS/Exploit-Blacole.lj
- ZeroAccess.ig
- Enhanced Detections:
- BackDoor-EJG
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.kf
- JS/Exploit-Blacole.kz
- JS/Exploit-Blacole.la
- JS/Exploit-Blacole.lb
- JS/Exploit-Blacole.lc
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lf
- PWS-Fmocx.b
- PWS-OnlineGames.lj
- PWS-Zbot.gen.any
- PWS-Zbot.gen.arw
- PWS-Zbot.gen.ary
- TDSS.ap
- ZeroAccess
- ZeroAccess.dr
- ZeroAccess.hr
Changes for v11.0.0.207 - v11.0.0.209
- New Detections:
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lf
- Enhanced Detections:
- Exploit-CVE2011-1990
- False Digisig present
- JS/Exploit-Blacole
- JS/Exploit-Blacole.gg
- JS/Exploit-Blacole.gq
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ky
- JS/Exploit-Blacole.kz
- JS/Exploit-Blacole.la
- JS/Exploit-Blacole.lb
- JS/Exploit-Blacole.lc
- JS/Exploit-Blacole.ld
- PWS-Zbot.gen.any
- PWS-Zbot.gen.arw
- W32/Autorun.worm.g
- ZeroAccess
Changes for v11.0.0.206 - v11.0.0.207
- Enhanced Detections:
- Generic Downloader.z
- Generic FakeAlert.eo
- JS/Exploit-Blacole.cw
- JS/Exploit-Blacole.gc
- PWS-Fmocx.a
- PWS-Zbot
- PWS-Zbot.gen.agz
- PWS-Zbot.gen.any
- PWS-Zbot.gen.aov
- PWS-Zbot.gen.arw
- PWS-Zbot.gen.asm
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.c
- ZeroAccess
Changes for v11.0.0.204 - v11.0.0.206
- New Detections:
- JS/Exploit-Blacole.ld
- Enhanced Detections:
- Exploit-CVE2011-1990
- FakeAlert-SecurityTool.fl
- FakeAlert-SecurityTool.fx
- FakeAlert-SecurityTool.ga
- Generic Downloader.z
- Generic FakeAlert
- Generic PWS.aac
- JS/Exploit-Blacole
- JS/Exploit-Blacole.em
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.kh
- JS/Exploit-Blacole.kx
- JS/Exploit-Blacole.lc
- JS/Exploit-Blacole.ld
- PWS-DOD.a
- W32/Autorun.worm.c
- ZeroAccess
- ZeroAccess.hr
Changes for v11.0.0.201 - v11.0.0.204
- New Detections:
- JS/Exploit-Blacole.lc
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.gg
- JS/Exploit-Blacole.gq
- JS/Exploit-Blacole.kt
- Medfos.e
- PWS-Zbot
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.c
- W32/Autorun.worm.h
Changes for v11.0.0.200 - v11.0.0.201
- Enhanced Detections:
- Exploit-CVE2011-1990
- Generic Downloader.z
- JS/Exploit-Blacole.gq
- JS/Exploit-Blacole.ht
- PWS-Zbot.gen.any
- PWS-Zbot.gen.ash
- Vundo
- W32/Rimecud.gen.bc
- ZeroAccess
