Version history for McAfee Stinger
<<Back to software description
Changes for v12.1.0.3396 - v12.1.0.3411
- New Detections:
- • PDF/Exploit.c
- • Ransom-Generic
- • Ransom-Robin.y
- Enhanced Detections:
- • Generic Exploit.a
- • Generic Trojan.ju
- • Generic Trojan.kf
- • Generic Trojan.kj
- • PS/LemonDuck
- • Trojan-AitInject.bk
Changes for v12.1.0.3394 - v12.1.0.3396
- New Detections:
- • AUTOIT/Agent.c
- • AUTOIT/Agent.d
- • AUTOIT/Agent.e
- • Autoit.gen.b
- • BackDoor-Bladabindi
- • Exploit-CVE2016-0189.d
- • Exploit-CVE2018-8174.e
- • Exploit-CVE2019-19781
- • Generic Packed.cp
- • Generic Trojan.KT
- • Generic Trojan.kr
- • Generic Trojan.ks
- • Python/PWS.e
- • Ransom-Ako.a
- • Ransom/Horsedeal
- • Trojan-AitInject.bi
- • Trojan-AutoIt.e
- • Trojan-AutoIt.f
- • Trojan-Scaler
- • VBS/Cleanup
- Enhanced Detections:
- • AUTOIT/Injector.aq
- • DistTrack
- • Exploit-CVE-2017-11882
- • Generic Packed.iso
- • Generic trojan.kh
- • PWS-AHK.c
- • PWS-AutoIt.d
- • Python/PWS.d
- • Ransom-Ryuk
- • Trojan-AitInject.aq
- • Trojan-AitInject.bg
- • Trojan-AitMiner.h
- • Trojan-AutoIT.a
- • Trojan-AutoIt.d
- • Trojan-Injector.b
- • Trojan-PWS.c
- • Trojan-Ransom.b
- • Trojan-Spy.s
- • Trojan-Wiper
- • Trojan-aitinject.bh
Changes for v12.1.0.3382 - v12.1.0.3394
- New Detections:
- • AUTOIT/Agent.c
- • AUTOIT/Agent.d
- • AUTOIT/Agent.e
- • Autoit.gen.b
- • BackDoor-Bladabindi
- • Exploit-CVE2016-0189.d
- • Exploit-CVE2018-8174.e
- • Exploit-CVE2019-19781
- • Generic Packed.cp
- • Generic Trojan.KT
- • Generic Trojan.kr
- • Generic Trojan.ks
- • Python/PWS.e
- • Ransom-Ako.a
- • Ransom/Horsedeal
- • Trojan-AitInject.bi
- • Trojan-AutoIt.e
- • Trojan-AutoIt.f
- • Trojan-Scaler
- • VBS/Cleanup
- Enhanced Detections:
- • AUTOIT/Injector.aq
- • DistTrack
- • Exploit-CVE-2017-11882
- • Generic Packed.iso
- • Generic trojan.kh
- • PWS-AHK.c
- • PWS-AutoIt.d
- • Python/PWS.d
- • Ransom-Ryuk
- • Trojan-AitInject.aq
- • Trojan-AitInject.bg
- • Trojan-AitMiner.h
- • Trojan-AutoIT.a
- • Trojan-AutoIt.d
- • Trojan-Injector.b
- • Trojan-PWS.c
- • Trojan-Ransom.b
- • Trojan-Spy.s
- • Trojan-Wiper
- • Trojan-aitinject.bh
Changes for v12.1.0.3278 - v12.1.0.3280
- New Detections:
- • LemonDuck!mem
- Enhanced Detections:
- • Generic Trojan.w
- • Trojan-AitInject.as
- • ZeroAccess!cfg
Changes for v12.1.0.3272 - v12.1.0.3278
- New Detections:
- • Exploit-CVE2019-0708
- • Exploit-GAB
- • Sodinokibi
- • Trojan-Trickbot.a
- • VegaLocker
- Enhanced Detections:
- • GenDownloader.gm
- • Generic Trojan.i
- • Trojan-AitInject.aq
- • Trojan-AitMiner.d
- • Trojan-AitMiner.e
- • Trojan-AitMiner.f
- • Trojan-AitMiner.g
- • Trojan-CoinMiner
- • Trojan-Spy.s
- • ZeroAccess!cfg
Changes for v12.1.0.3198 - v12.1.0.3215
- New Detections:
- • Trojan-AitInject.av
- Enhanced Detections:
- • Trojan-Exploit.rtf
- • Trojan-Packed.RAR
- • Trojan-PoweLike.c!reg
Changes for v12.1.0.3132 - v12.1.0.3160
- New Detections:
- • Trojan-FQXA
- Enhanced Detections:
- • Exploit-CVE2017-11882
- • Generic Trojan.j
- • Ransom-Cortex
- • Trojan-Packed.RAR
Changes for v12.1.0.3115 - v12.1.0.3116
- New Detections:
- • Exploit-CVE2008-4250
- Enhanced Detections:
- • Exploit-CVE2017-8570
Changes for v12.1.0.3098 - v12.1.0.3115
- New Detections:
- • Ransom-GCrab
- • Trojan-StartPage
- Enhanced Detections:
- • AutoIt/Injector.i
- • CVE2017-11882
- • Generic Trojan.i
- • Trojan-PWS
Changes for v12.1.0.3094 - v12.1.0.3098
- Enhanced Detections:
- • Trojan-PWS
Changes for v12.1.0.3074 - v12.1.0.3094
- New Detections:
- • CVE2018-20250
- • Trojan-Exploit.rtf
- Enhanced Detections:
- • Generic Trojan.j
- • JS/Kryptik.gen.a
- • Trojan-Agent
- • Trojan-AitInject.ak
- • Trojan-AitInject.am
- • Trojan-Emotet
Changes for v12.1.0.3051 - v12.1.0.3054
- New Detections:
- • PDF/Exploit.a
- • Trojan-Separ
- Enhanced Detections:
- • Exploit-CVE-2010-2883
- • Trojan-Separ
Changes for v12.1.0.3030 - vv12.1.0.3037
- New Detections:
- • AUTOIT/Injector.t
- • Trojan-PShell.spy
- Enhanced Detections:
- • ANDROID/Spy.a
- • Exploit-CVE2012-0158!rtf
- • Exploit-CVE2017-11882
- • Generic Trojan.J
- • PDF/Phishing.gen.b
- • Trojan-AitInject.ak
- • Trojan-CoinMiner
- • W32/Shellcode.a
Changes for v12.1.0.3028 - v12.1.0.3030
- New Detections:
- • Exploit-CVE2016-7262
- • Trojan-RottenPt
- Enhanced Detections:
- • 1
- • Generic Trojan.i
- • Ransom-Matrix
- • Trojan-Backdoor
- • Trojan-Emotet
- • Trojan-MereTam
- • Trojan-PWS
- • Trojan-Ransom
- • Trojan-aitinject.ah
Changes for v12.1.0.3007 - v12.1.0.3016
- New Detections:
- • Ransom-Anatova
- Enhanced Detections:
- • Exploit-CVE2017-8759.m
- • Exploit-RTF
- • Generic Trojan.i
Changes for v12.1.0.3003 - v12.1.0.3004
- Enhanced Detections:
- • Trojan-AitInject.ad
Changes for v12.1.0.2974 - `v12.1.0.2985
- New Detections:
- • 7zipSFX
- • AT4RE Protector
- • Adware-AddLyrics
- • Adware-BProtect
- • Adware-BSurf
- • Adware-BetterInstaller
- • Adware-BetterSurf
- • Adware-Bprotect
- • Adware-Bprotect.a
- • Adware-Bprotect.b
- • Adware-Bprotect.c
- • Adware-DomaIQ
- • Adware-Eorezo
- • Adware-Hebogo
- • Adware-Iffinity
- • Adware-InstallQ
- • Adware-MegaSearch
- • Adware-MixiDJToolbar
- • Adware-Monetizer
- • Adware-NewNext
- • Adware-OutBrowse
- • Adware-PowerOffer
- • Adware-SaveShare
- • Adware-SweetIM
- • Adware-iBryte
- • AlexProtect
- • AntiDote
- • AstrumSFX
- • AutoHotKey
- • AutoIT
- • AutoIT 2.6.4
- • AutoIT 3.0.x.x - 3.1.x.x
- • AutoIT 3.2.0.x - 3.2.5.x
- • AutoIT 3.2.6.x+
- • Bat To Exe Converter
- • Bat/Mumu.worm
- • Bojan
- • BrainInstall
- • Crossrider
- • DMG
- • DirectDownminer
- • DistTrack!sys
- • Distromatic
- • DomaIQ
- • Downloader-BPJ.gen.a
- • Downloader-FKW
- • Downloader-FMA
- • Downloader-FMB
- • Downloader-FMJ
- • DriverPack
- • EXECrypter
- • EXECryptor
- • Efca
- • Encoded Executable
- • Enigma
- • Excalibur
- • Exploit-DcomRpc
- • Exploit-DcomRpc.b
- • Exploit-DcomRpc.dll
- • Exploit-IFrame.gen.ah
- • Exploit-IFrame.gen.ak
- • Exploit-IFrame.gen.am
- • Exploit-Lsass
- • Exploit-Lsass.dll
- • Exploit-MS04-011
- • Exploit-MS04-011.gen
- • Exploit-SWF!Blacole.dx
- • Exploit-XMLhttp.d
- • Exploit-XMLhttp.d.gen
- • Exploit-XMLhttp.d.gen.b
- • Exploit-XMLhttpd.d
- • Exploit-XMLhttpd.gen.c
- • FakeAlert.dx
- • FishPE.a
- • FreeKey
- • GameEnix
- • GameVance.gen.be
- • GameVance.gen.bf
- • Generic Malware.af!ats
- • Generic Malware.ce!pec
- • Generic Malware.ev!pec
- • Generic.Dropped.a
- • Generic.Miuref.dx
- • Generic.Upatre.dx
- • Generic.dam
- • Generic.gl
- • Generic.it
- • Generic.iu
- • Generic.iw
- • Generic.jb
- • Generic.jg
- • Generic.jk
- • Generic.jl
- • Generic.jp
- • Generic.jq
- • Generic.jv
- • Generic.jw
- • Generic.jx
- • Generic.jy
- • Generic.kg
- • Generic.kh
- • Generic.kk
- • Generic.ko
- • Generic.kp
- • Generic.kq
- • Generic.kr
- • Generic.ks
- • Generic.ku
- • Generic.la
- • Generic.le
- • Generic.lp
- • Generic.lq
- • Generic.lr
- • Generic.lt
- • Generic.lu
- • Generic.lv
- • Generic.lw
- • Generic.lx
- • Generic.ma
- • Generic.mf
- • Generic.mg
- • Generic.mh
- • Generic.mi
- • Generic.mj
- • Generic.mk
- • Generic.ml
- • Generic.mm
- • Generic.mn
- • Generic.mt
- • Generic.mu
- • Generic.mv
- • Generic.mw
- • Generic.mx
- • Generic.my
- • Generic.nd
- • Generic.ne
- • Generic.nf
- • Generic.ni
- • Generic.nj
- • Generic.nn
- • Generic.no
- • Generic.np
- • Generic.nq
- • Generic.nr
- • Generic.nv
- • Generic.nw
- • Generic.nx
- • Generic.ny
- • Generic.nz
- • Generic.og
- • Generic.oh
- • Generic.om
- • Generic.on
- • Generic.oo
- • Generic.op
- • Generic.oq
- • Generic.ou
- • Generic.ov
- • Generic.ow
- • Generic.ox
- • Generic.pa
- • Generic.pb
- • Generic.pk
- • Generic.pl
- • Generic.pm
- • Generic.pt
- • Generic.pu
- • Generic.px
- • Generic.py
- • Generic.pz
- • Generic.qc
- • Generic.qd
- • Generic.qe
- • Generic.qi
- • Generic.qj
- • Generic.qk
- • Generic.ql
- • Generic.qm
- • Generic.qn
- • Generic.qo
- • Generic.qp
- • Generic.qq
- • Generic.qr
- • Generic.qu
- • Generic.qv
- • Generic.qw
- • Generic.qy
- • Generic.qz
- • Generic.ra
- • Generic.rb
- • Generic.rc
- • Generic.rd
- • Generic.re
- • Generic.rf
- • Generic.rj
- • Generic.rk
- • Generic.rl
- • Generic.rm
- • Generic.ro
- • Generic.rt
- • Generic.sb
- • Generic.sc
- • Generic.sd
- • Generic.sg
- • Generic.si
- • Generic.sj
- • Generic.sn
- • Generic.so
- • Generic.sp
- • Generic.sq
- • Generic.sr
- • Generic.ss
- • Generic.st
- • Generic.su
- • Generic.sv
- • Generic.sw
- • Generic.tb
- • Generic.tc
- • Generic.td
- • Generic.te
- • Generic.tf
- • Generic.tl
- • Generic.to
- • Generic.tp
- • Generic.tq
- • Generic.tr
- • Generic.ts
- • Generic.tt
- • Generic.tu
- • Generic.tv
- • Generic.tz
- • Generic.ua
- • Generic.ub
- • Generic.ud
- • Generic.ue
- • Generic.uf
- • Generic.ug
- • Generic.ui
- • Generic.uj
- • Generic.uk
- • Generic.um
- • Generic.un
- • Generic.uo
- • Generic.uq
- • Generic.ur
- • Generic.ut
- • Generic.vg
- • Generic.vm
- • Generic.vn
- • Generic.vt
- • Generic.vu
- • GenteeInstaller
- • GnuCompiler
- • GoToAssist
- • HTool-JSP/WebShell
- • HTool-JSPRat
- • HTool-RemoteCmd
- • HackPack.a
- • HackTool-ZBotBuilder
- • HideWindow
- • HideWindow.dll
- • InnoSFX
- • InstallCore
- • InstallMonster
- • InstallShieldSFX
- • Installrex.dr
- • Ividi
- • Iwin
- • JS/Blacole.dx
- • JS/Downloader-AUE
- • JS/Downloader-FCV
- • JS/IFrame.gen
- • JS/IFrame.gen.a
- • JS/IFrame.gen.h
- • JS/Iframe.gen
- • JS/PornPopup
- • JS/Redirector.ad
- • JS/Redirector.af
- • JS/Redirector.an
- • JS/Redirector.c
- • JS/Wonka
- • JV/Blacole.dx
- • Joke-ArchSMS.f
- • Karp.ai
- • Karp.c
- • Karp.w.a
- • Karp.w.b
- • Katusha
- • Keylog-FAE
- • Keylog-SFY.dr
- • Kryp.c
- • Kryp.d
- • Kryp.e
- • Linkun
- • LowFox
- • Luckyleap
- • MMBuilderSFX
- • MPGH
- • MalHeur-ACE
- • MaskPE
- • Matrix-Lock
- • Maxiget
- • Mplug.gen.a
- • Mutilator
- • NSAnti
- • New Installer
- • New Packer
- • OSX/Baoba
- • Obfuscated JScript.d
- • Obfuscated JScript.e
- • ObfuscatedAutoIt.a
- • PE-Armour
- • PEP
- • PUP-FGB
- • PUP-FGC
- • PUP-FGE
- • PWCrack-PWDump
- • PWCrack-SQLRemote
- • PWS-Zbot!mxr
- • PWS-Zbot.dx
- • PWS-Zbot.dx!rar
- • PWS-Zbot.dx!zip
- • Packsu
- • PePatch-poly.a
- • PePatch-poly.b
- • PolyCrypt
- • Polyene
- • PowerPack
- • RCryptor
- • RCryptor 1.6d
- • RCryptor 2.0
- • RLPack
- • RPCrypt
- • Ransom.dx
- • RarSFX
- • Revolt.a
- • Revolt.b
- • Revolt.c
- • RuBoard
- • SmartInstallMaker
- • Somoto-BetterInstaller
- • Spyware-Nucleus
- • Spyware-RemoteSpy
- • Spyware-UltraKeyboard
- • Suspicious Keygen!rar
- • Themida
- • Thinstall
- • Tool-FaceHack
- • Tool-NetCat
- • Tool-ProcKill
- • Tool-VPassDecode
- • Toolbar-Browser
- • Toolbar-Inbox
- • TorrentSFX
- • Trojan-SkyHook
- • UltraDownload
- • Ultrarchive
- • Upatre.dx!zip
- • VBS/IE-Title
- • W32/Gaobot.worm
- • W32/Generic.worm!irc
- • W32/Generic.worm.aa
- • W32/Generic.worm.ab
- • W32/Generic.worm.ac
- • W32/Generic.worm.ad
- • W32/Generic.worm.ae
- • W32/Generic.worm.af
- • W32/Generic.worm.ag
- • W32/Generic.worm.h
- • W32/Generic.worm.i
- • W32/Generic.worm.j
- • W32/Generic.x
- • W32/Generic.y
- • W32/Generic.z
- • W32/Harwig.worm
- • W32/Mytob.gen@MM
- • W32/Mytob.worm
- • W32/Polip
- • W32/Spybot.worm
- • WebexpEnhanced
- • WinAceSFX
- • WiseSFX
- • nBinder 5
- • nPack
- • oRiEN
- • prefetch_clean
- • ransom.dx
- • with fishy extension
- • ~T-SUS-BT
- • ~T-SUS-BU
- • ~T-SUS-BV
- Enhanced Detections:
- • Adware-BetterSurf
- • Adware-Bprotect
- • Adware-DomaIQ
- • Adware-Eorezo
- • Adware-OutBrowse
- • Crossrider
- • EXECryptor
- • Exploit-DcomRpc
- • Exploit-Lsass
- • Exploit-XMLhttp.d
- • Exploit-XMLhttp.d.gen
- • Exploit-XMLhttpd.d
- • FakeAlert.dx
- • Generic.dam
- • Generic.dx
- • Generic.oh
- • Generic.on
- • Generic.ow
- • Generic.rk
- • Generic.sp
- • Generic.sq
- • Generic.sr
- • Generic.tz
- • Generic.ui
- • Generic.un
- • Generic.uo
- • Generic.vt
- • HTool-JSP/WebShell
- • HTool-JSPRat
- • HTool-RemoteCmd
- • HideWindow
- • JS/IFrame.gen
- • JS/Redirector
- • JV/Blacole.dx
- • PEP
- • PWCrack-PWDump
- • PWS-Zbot
- • PWS-Zbot.dx
- • PWS-Zbot.dx!zip
- • Polyene
- • RCryptor
- • Ransom.dx
- • Themida
- • Trojan-Injector
- • Trojan-Ransom
- • Trojan-SkyHook
- • Upatre.dx!zip
- • VBS/IE-Title
- • W32/Gaobot.worm
- • W32/Mytob.gen@MM
- • W32/Sdbot.worm
- • W32/Spybot.worm
- • WiseSFX
- • ZeroAccess
- • ransom.dx
Changes for v12.1.0.2949 - v12.1.0.2952
- New Detections:
- • W32/Virut.p
- Enhanced Detections:
- • Exploit-CVE2017-8759.m
- • JV/Exploit-Blacole.t
Changes for v12.1.0.2880 - v12.1.0.2946
- New Detections:
- • Trojan-FastCash
- Enhanced Detections:
- • Trojan-CoinMiner
- • Trojan-FQGY!eml
Changes for v12.1.0.2877 - v12.1.0.2880
- Enhanced Detections:
- • Trojan-AitInject.u
- • Trojan-PoweLike!lnk
Changes for v12.1.0.2876 - v12.1.0.2877
- Enhanced Detections:
- • Generic Exploit.t
Changes for v12.1.0.2875 - v12.1.0.2876
- New Detections:
- • ANDROID/Spy.a
- • Generic Packed.iso
- Enhanced Detections:
- • AutoIt/Injector.i
- • Generic Exploit.f
- • Generic Trojan.i
- • Trojan-AitInject.u
Changes for v12.1.0.2873 - v12.1.0.2875
- New Detections:
- • CoinMiner.b
- • Packed-FNF
- Enhanced Detections:
- • Emotet-FHN
- • Generic HackTool
- • Trojan-AitInject.u
- • Trojan-AitInject.v
Changes for v12.1.0.2871 - v12.1.0.2873
- New Detections:
- • Ran-GandCrabv4
- Enhanced Detections:
- • Trojan-BackSwap.a
Changes for v12.1.0.2866 - v12.1.0.2871
- New Detections:
- • Python/Ransom.d
- Enhanced Detections:
- • Generic Trojan.i
- • Trojan-Stealer
Changes for v12.1.0.2865 - v12.1.0.2866
- New Detections:
- • Ransom-Ryuk
- • Ransom-Warskwing
Changes for v12.1.0.2862 - v12.1.0.2865
- New Detections:
- • Trojan-Agent
- • Trojan-Batch
- • Trojan-JStarter
- • Trojan-Zbot
- Enhanced Detections:
- • CVE2017-11882
Changes for v12.1.0.2861 - v12.1.0.2862
- Enhanced Detections:
- • XML/Deeplink.b
Changes for v12.1.0.2856 - v12.1.0.2861
- New Detections:
- • coinminer
- Enhanced Detections:
- • Emotet-FHN
- • Generic Trojan.i
- • Generic-FAEX
- • JV/Payload.a
- • coinminer
Changes for v12.1.0.2855 - v12.1.0.2856
- New Detections:
- • Generic-FAEX
- • Trojan-AitInject.t
- Enhanced Detections:
- • AutoIt/Injector.i
Changes for v12.1.0.2854 - v12.1.0.2855
- New Detections:
- • Trojan-AitInject.s
- Enhanced Detections:
- • BackDoor-NJRat!Rar
- • Generic Trojan.c
- • Ransom-O
Changes for v12.1.0.2853 - v12.1.0.2854
- New Detections:
- • Trojan-AitInject.r
- Enhanced Detections:
- • CoinMiner
- • Exploit-CVE2015-1592
- • Exploit-CVE2017-11882.aq
- • Trojan-AitInject.q
- • Trojan-Zebrocy
- • cleanStartUpEntriesCLIB
Changes for v12.1.0.2818 - v12.1.0.2826
- New Detections:
- • Packed-FNE
- • Trojan-PWS
- Enhanced Detections:
- • CoinMiner
Changes for v12.1.0.2817 - v12.1.0.2818
- New Detections:
- • Trojan-GoBot
- Enhanced Detections:
- • Generic Packed.ace
- • Generic Trojan.c
- • Trojan-Marduk.a
Changes for v12.1.0.2816 - v12.1.0.2817
- New Detections:
- • Exploit-HWP
- • PS/EternalBlue
- • PS/Invex
- Enhanced Detections:
- • Generic Trojan.c
- • Generic Trojan.i
- • Generic Trojan.iso
- • Generic trojan.i
Changes for v12.1.0.2815 - v12.1.0.2816
- New Detections:
- • Exploit-HWP
- Enhanced Detections:
- • Generic Trojan.i
- • Generic trojan.i
Changes for v12.1.0.2759 - v12.1.0.2763
- New Detections:
- • Generic PWS.p
- Enhanced Detections:
- • CVE2017-11882
- • Generic Packed.tmda
- • JS/Exploit-Blacole.ht
Changes for v12.1.0.2757 - v12.1.0.2759
- Enhanced Detections:
- • Exploit-CVE2017-8759.m
- • Generic Trojan.i
- • Ransom-O
Changes for v12.1.0.2752 - v12.1.0.2757
- New Detections:
- • Exploit-CVE2018-4490
- Enhanced Detections:
- • AutoIt/Injector.f
- • Exploit-CVE2017-0199
- • Exploit-CVE2018-0946
- • Exploit-CVE2018-0951
- • Exploit-CVE2018-0953
- • Exploit-CVE2018-0954
- • Exploit-CVE2018-0955
- • Exploit-CVE2018-8114
- • Exploit-CVE2018-8122
- • Exploit-CVE2018-8123
- • Exploit-CVE2018-8133
- • Exploit-CVE2018-8174
- • Exploit-CVE2018-8179
- • Generic Trojan.i
- • Generic Trojan.j
Changes for v12.1.0.2712 - v12.1.0.2714
- Enhanced Detections:
- • Exploit-CVE2017-8759
- • Generic Trojan.i
Changes for v12.1.0.2711 - v12.1.0.2712
- Enhanced Detections:
- • Exploit-CVE2017-0199
- • Exploit-CVE2017-0199.bf
- • Exploit-RTF.Generic
- • Exploit-RTF.Yoban
- • WASM/CoinMiner.b
- • WASM/CoinMiner.c
- • WASM/CoinMiner.d
Changes for v12.1.0.2710 - v12.1.0.2711
- Enhanced Detections:
- • Exploit-CVE2017-0199
- • GZIP_Bug_1231494_Fix
- • Generic Exploit.a
- • Generic Trojan.b
Changes for v12.1.0.2701 - v12.1.0.2710
- New Detections:
- • Exploit-CVE2017-0199.bg
- • Exploit-RTF.Generic
- • Exploit-RTF.Yoban
- • Generic Exploit.t
- • WASM/CoinMiner.b
- • WASM/CoinMiner.c
- • WASM/CoinMiner.d
- Enhanced Detections:
- • Emotet-FCY!
- • Exploit-CVE2018-0825
- • Generic Trojan.i
Changes for v12.1.0.2699 - v12.1.0.2701
- New Detections:
- • Exploit-CVE2017-11882.k
- • PYTHON/Dropper.b
- Enhanced Detections:
- • Bat/CoinMiner
- • CVE2017-11882
- • CoinMiner
- • Emotet-FCY!
- • Exploit-CVE2017-11882
- • Generic Trojan.i
- • Generic Trojan.j
- • NSIS/Coinminer.a
Changes for v12.1.0.2696 - v12.1.0.2699
- Enhanced Detections:
- • Exploit-CVE2017-8759.v
- • Exploit-CVE2018-4878.h
Changes for v12.1.0.2694 - v12.1.0.2696
- New Detections:
- • Ransom-GandCrab
- Enhanced Detections:
- • CoinMiner-Remnant
- • Emotet-FCY!
- • Exploit-CVE2017-0199
- • Exploit-CVE2017-11882
- • Exploit-CVE2017-11882.j
- • Exploit-CVE2017-8759.m
- • Exploit-CVE2017-8759.v
- • JS/Exploit-Rigkit.p
- • NSIS/Coinminer.a
Changes for v12.1.0.2692 - v12.1.0.2694
- New Detections:
- • Exploit-CVE2017-8759.v
- • Exploit-CVE2018-4878.h
- Enhanced Detections:
- • Emotet-FCY!
- • Exploit-CVE2017-11882
- • Generic Packed.ace
- • Generic Trojan.j
Changes for v12.1.0.2689 - v12.1.0.2692
- New Detections:
- • Fareit-FKS
- Enhanced Detections:
- • Emotet-FCY!
- • Exploit-CVE2017-8759.m
- • Exploit-RTF
- • Generic Packed.ace
- • Generic Trojan.i
- • OSX/Coinminer
Changes for v12.1.0.2687 - v12.1.0.2689
- New Detections:
- • OSX/Coinminer
- Enhanced Detections:
- • CoinMiner
- • CoinMiner.a
- • Exploit-CVE2017-0199
- • Exploit-CVE2017-0199.be
Changes for v12.1.0.2682 - v12.1.0.2687
- New Detections:
- • Exploit-CVE2017-8759.r
- • Exploit-CVE2017-8759.s
- • Exploit-CVE2018-4878.e
- • Exploit-CVE2018-4878.f
- • Exploit-CVE2018-4878.g
- Enhanced Detections:
- • Exploit-CVE2015-1650
- • Exploit-CVE2017-8759.p
- • Generic Trojan.iso
Changes for v12.1.0.2675 - v12.1.0.2682
- New Detections:
- • 7zipSFX
- • AT4RE Protector
- • Adware-AddLyrics
- • Adware-BProtect
- • Adware-BSurf
- • Adware-BetterInstaller
- • Adware-BetterSurf
- • Adware-Bprotect
- • Adware-Bprotect.a
- • Adware-Bprotect.b
- • Adware-Bprotect.c
- • Adware-DomaIQ
- • Adware-Eorezo
- • Adware-Hebogo
- • Adware-Iffinity
- • Adware-InstallQ
- • Adware-MegaSearch
- • Adware-MixiDJToolbar
- • Adware-Monetizer
- • Adware-NewNext
- • Adware-OutBrowse
- • Adware-PowerOffer
- • Adware-SaveShare
- • Adware-SweetIM
- • Adware-iBryte
- • AlexProtect
- • AntiDote
- • AstrumSFX
- • AutoHotKey
- • AutoIT
- • AutoIT 2.6.4
- • AutoIT 3.0.x.x - 3.1.x.x
- • AutoIT 3.2.0.x - 3.2.5.x
- • AutoIT 3.2.6.x+
- • Bat To Exe Converter
- • Bat/Mumu.worm
- • Bojan
- • BrainInstall
- • CoinMiner.a
- • Corebot!mxr
- • Crossrider
- • DMG
- • DirectDownminer
- • DistTrack!sys
- • Distromatic
- • DomaIQ
- • Downloader-BPJ.gen.a
- • Downloader-FKW
- • Downloader-FMA
- • Downloader-FMB
- • Downloader-FMJ
- • DriverPack
- • EXECrypter
- • EXECryptor
- • Efca
- • Encoded Executable
- • Enigma
- • Excalibur
- • Exploit-DcomRpc
- • Exploit-DcomRpc.b
- • Exploit-DcomRpc.dll
- • Exploit-IFrame.gen.ah
- • Exploit-IFrame.gen.ak
- • Exploit-IFrame.gen.am
- • Exploit-Lsass
- • Exploit-Lsass.dll
- • Exploit-MS04-011
- • Exploit-MS04-011.gen
- • Exploit-SWF!Blacole.dx
- • Exploit-XMLhttp.d
- • Exploit-XMLhttp.d.gen
- • Exploit-XMLhttp.d.gen.b
- • Exploit-XMLhttpd.d
- • Exploit-XMLhttpd.gen.c
- • FakeAlert.dx
- • FishPE.a
- • FreeKey
- • GameEnix
- • GameVance.gen.be
- • GameVance.gen.bf
- • Generic Malware.af!ats
- • Generic Malware.ce!pec
- • Generic Malware.ev!pec
- • Generic.Dropped.a
- • Generic.Miuref.dx
- • Generic.Upatre.dx
- • Generic.dam
- • Generic.gl
- • Generic.it
- • Generic.iu
- • Generic.iw
- • Generic.jb
- • Generic.jg
- • Generic.jk
- • Generic.jl
- • Generic.jp
- • Generic.jq
- • Generic.jv
- • Generic.jw
- • Generic.jx
- • Generic.jy
- • Generic.kg
- • Generic.kh
- • Generic.kk
- • Generic.ko
- • Generic.kp
- • Generic.kq
- • Generic.kr
- • Generic.ks
- • Generic.ku
- • Generic.la
- • Generic.le
- • Generic.lp
- • Generic.lq
- • Generic.lr
- • Generic.lt
- • Generic.lu
- • Generic.lv
- • Generic.lw
- • Generic.lx
- • Generic.ma
- • Generic.mf
- • Generic.mg
- • Generic.mh
- • Generic.mi
- • Generic.mj
- • Generic.mk
- • Generic.ml
- • Generic.mm
- • Generic.mn
- • Generic.mt
- • Generic.mu
- • Generic.mv
- • Generic.mw
- • Generic.mx
- • Generic.my
- • Generic.nd
- • Generic.ne
- • Generic.nf
- • Generic.ni
- • Generic.nj
- • Generic.nn
- • Generic.no
- • Generic.np
- • Generic.nq
- • Generic.nr
- • Generic.nv
- • Generic.nw
- • Generic.nx
- • Generic.ny
- • Generic.nz
- • Generic.og
- • Generic.oh
- • Generic.om
- • Generic.on
- • Generic.oo
- • Generic.op
- • Generic.oq
- • Generic.ou
- • Generic.ov
- • Generic.ow
- • Generic.ox
- • Generic.pa
- • Generic.pb
- • Generic.pk
- • Generic.pl
- • Generic.pm
- • Generic.pt
- • Generic.pu
- • Generic.px
- • Generic.py
- • Generic.pz
- • Generic.qc
- • Generic.qd
- • Generic.qe
- • Generic.qi
- • Generic.qj
- • Generic.qk
- • Generic.ql
- • Generic.qm
- • Generic.qn
- • Generic.qo
- • Generic.qp
- • Generic.qq
- • Generic.qr
- • Generic.qu
- • Generic.qv
- • Generic.qw
- • Generic.qy
- • Generic.qz
- • Generic.ra
- • Generic.rb
- • Generic.rc
- • Generic.rd
- • Generic.re
- • Generic.rf
- • Generic.rj
- • Generic.rk
- • Generic.rl
- • Generic.rm
- • Generic.ro
- • Generic.rt
- • Generic.sb
- • Generic.sc
- • Generic.sd
- • Generic.sg
- • Generic.si
- • Generic.sj
- • Generic.sn
- • Generic.so
- • Generic.sp
- • Generic.sq
- • Generic.sr
- • Generic.ss
- • Generic.st
- • Generic.su
- • Generic.sv
- • Generic.sw
- • Generic.tb
- • Generic.tc
- • Generic.td
- • Generic.te
- • Generic.tf
- • Generic.tl
- • Generic.to
- • Generic.tp
- • Generic.tq
- • Generic.tr
- • Generic.ts
- • Generic.tt
- • Generic.tu
- • Generic.tv
- • Generic.tz
- • Generic.ua
- • Generic.ub
- • Generic.ud
- • Generic.ue
- • Generic.uf
- • Generic.ug
- • Generic.ui
- • Generic.uj
- • Generic.uk
- • Generic.um
- • Generic.un
- • Generic.uo
- • Generic.uq
- • Generic.ur
- • Generic.ut
- • Generic.vg
- • Generic.vm
- • Generic.vn
- • Generic.vt
- • Generic.vu
- • GenteeInstaller
- • GnuCompiler
- • GoToAssist
- • Golroted!mxr
- • Golroted-TRG
- • HTool-JSP/WebShell
- • HTool-JSPRat
- • HTool-RemoteCmd
- • HackPack.a
- • HackTool-ZBotBuilder
- • HideWindow
- • HideWindow.dll
- • InnoSFX
- • InstallCore
- • InstallMonster
- • InstallShieldSFX
- • Installrex.dr
- • Ividi
- • Iwin
- • JS/Blacole.dx
- • JS/Downloader-AUE
- • JS/Downloader-FCV
- • JS/IFrame.gen
- • JS/IFrame.gen.a
- • JS/IFrame.gen.h
- • JS/Iframe.gen
- • JS/PornPopup
- • JS/Redirector.ad
- • JS/Redirector.af
- • JS/Redirector.an
- • JS/Redirector.c
- • JS/Wonka
- • JV/Blacole.dx
- • Joke-ArchSMS.f
- • Karp.ai
- • Karp.c
- • Karp.w.a
- • Karp.w.b
- • Katusha
- • Keylog-FAE
- • Keylog-SFY.dr
- • Kryp.c
- • Kryp.d
- • Kryp.e
- • Kuluoz!mxr
- • Linkun
- • LowFox
- • Luckyleap
- • MMBuilderSFX
- • MPGH
- • MalHeur-ACE
- • MaskPE
- • Matrix-Lock
- • Maxiget
- • Mplug.gen.a
- • Mutilator
- • NSAnti
- • New Installer
- • New Packer
- • OSX/Baoba
- • Obfuscated JScript.d
- • Obfuscated JScript.e
- • ObfuscatedAutoIt.a
- • PE-Armour
- • PEP
- • PUP-FGB
- • PUP-FGC
- • PUP-FGE
- • PWCrack-PWDump
- • PWCrack-SQLRemote
- • PWS-Zbot!mxr
- • PWS-Zbot.dx
- • PWS-Zbot.dx!rar
- • PWS-Zbot.dx!zip
- • Packsu
- • PePatch-poly.a
- • PePatch-poly.b
- • PolyCrypt
- • Polyene
- • PowerPack
- • RCryptor
- • RCryptor 1.6d
- • RCryptor 2.0
- • REG/Downloader.a
- • RLPack
- • RPCrypt
- • Ransom.dx
- • RarSFX
- • Revolt.a
- • Revolt.b
- • Revolt.c
- • RuBoard
- • SmartInstallMaker
- • Somoto-BetterInstaller
- • Spora!Trg
- • Spora!mxr
- • Spyware-Nucleus
- • Spyware-RemoteSpy
- • Spyware-UltraKeyboard
- • Suspicious Keygen!rar
- • TeslaCrypt!mxr
- • TeslaCrypt-TRG
- • Themida
- • Thinstall
- • Tool-FaceHack
- • Tool-NetCat
- • Tool-ProcKill
- • Tool-VPassDecode
- • Toolbar-Browser
- • Toolbar-Inbox
- • TorrentSFX
- • Trojan-SkyHook
- • UltraDownload
- • Ultrarchive
- • Upatre.dx!zip
- • VBS/IE-Title
- • W32/Gaobot.worm
- • W32/Generic.worm!irc
- • W32/Generic.worm.aa
- • W32/Generic.worm.ab
- • W32/Generic.worm.ac
- • W32/Generic.worm.ad
- • W32/Generic.worm.ae
- • W32/Generic.worm.af
- • W32/Generic.worm.ag
- • W32/Generic.worm.h
- • W32/Generic.worm.i
- • W32/Generic.worm.j
- • W32/Generic.x
- • W32/Generic.y
- • W32/Generic.z
- • W32/Harwig.worm
- • W32/Mytob.gen@MM
- • W32/Mytob.worm
- • W32/Polip
- • W32/Spybot.worm
- • WebexpEnhanced
- • WinAceSFX
- • WiseSFX
- • nBinder 5
- • nPack
- • oRiEN
- • prefetch_clean
- • ransom.dx
- • with fishy extension
- • ~T-SUS-BT
- • ~T-SUS-BU
- • ~T-SUS-BV
- Enhanced Detections:
- • Adware-BetterSurf
- • Adware-Bprotect
- • Adware-DomaIQ
- • Adware-Eorezo
- • Adware-OutBrowse
- • Crossrider
- • EXECryptor
- • Exploit-CVE2017-8759.p
- • Exploit-DcomRpc
- • Exploit-Lsass
- • Exploit-XMLhttp.d
- • Exploit-XMLhttp.d.gen
- • Exploit-XMLhttpd.d
- • FakeAlert.dx
- • Generic.dam
- • Generic.dx
- • Generic.oh
- • Generic.on
- • Generic.ow
- • Generic.rk
- • Generic.sp
- • Generic.sq
- • Generic.sr
- • Generic.tz
- • Generic.ui
- • Generic.un
- • Generic.uo
- • Generic.vt
- • HTool-JSP/WebShell
- • HTool-JSPRat
- • HTool-RemoteCmd
- • HideWindow
- • JS/IFrame.gen
- • JS/Redirector
- • JV/Blacole.dx
- • Kuluoz
- • PEP
- • PWCrack-PWDump
- • PWS-Zbot
- • PWS-Zbot.dx
- • PWS-Zbot.dx!zip
- • Polyene
- • RCryptor
- • Ransom-Saturn
- • Ransom.dx
- • Themida
- • Trojan-SkyHook
- • Upatre.dx!zip
- • VBS/IE-Title
- • W32/Gaobot.worm
- • W32/Mytob.gen@MM
- • W32/Sdbot.worm
- • W32/Spybot.worm
- • WiseSFX
- • ZeroAccess
- • ransom.dx
Changes for v12.1.0.2674 - v12.1.0.2675
- New Detections:
- • Exploit-CVE2017-0199.bb
- • Exploit-CVE2017-8759.p
- • ISO/Trojan.b
- Enhanced Detections:
- • CoinMiner
- • CoinMiner-XMR
- • Exploit-CVE2017-0199
- • Exploit-cve2017-0199.ba
- • Generic Trojan.be
- • W32/WinDex.i
Changes for v12.1.0.2669 - v12.1.0.2674
- New Detections:
- • NSIS/Injector.a
- Enhanced Detections:
- • Exploit-CVE2017-0199.au
- • Exploit-CVE2017-0199.ay
- • Exploit-CVE2017-0199.az
- • Generic Exploit.s
Changes for v12.1.0.2662 - v12.1.0.2668
- New Detections:
- • Exploit-CVE2017-11882.i
- • Exploit-SWF.bz
- Enhanced Detections:
- • Exploit-CVE2017-0199
- • Exploit-CVE2017-0199.au
- • Exploit-CVE2017-11882.d
- • W32/CoinMiner.g
Changes for v12.1.0.2651 - v12.1.0.2662
- New Detections:
- • Exploit-CVE2017-0199.au
- • Packed-YQ
- Enhanced Detections:
- • Generic trojan.i
- • JS/Redirector
Changes for v12.1.0.2650 - v12.1.0.2651
- New Detections:
- • Exploit-CVE2017-0199.aq
- • Generic Exploit.a
- • VBS/Powershell.a
- Enhanced Detections:
- • Trojan-Meltdown
Changes for v12.1.0.2630 - v12.1.0.2650
- New Detections:
- • Exploit-CVE2017-11882.d
- Enhanced Detections:
- • Emotet-FCY!
- • Exploit-CVE2017-11882.b
- • Exploit-CVE2017-8759.m
- • JS/Exploit-Rigkit.p
Changes for v12.1.0.2616 - v12.1.0.2619
- Enhanced Detections:
- • Generic Trojan.i
- • Generic Trojan.j
- • JS/Exploit-Rigkit.n
Changes for v12.1.0.2614 - v12.1.0.2616
- Enhanced Detections:
- • 1
- • Generic Trojan.i
Changes for v12.1.0.2610 - v12.1.0.2614
- New Detections:
- • Python/Ransom.c
Changes for v12.1.0.2608 - v12.1.0.2610
- Enhanced Detections:
- • Emotet-FCY!
- • Exploit-CVE2017-8759
- • Ransom-Hydracrypt
- • Trojan-CoinMiner
Changes for v12.1.0.2607 - v12.1.0.2608
- New Detections:
- • Exploit-CVE2017-8759.k
- Enhanced Detections:
- • Exploit-CVE2017-8759
- • Exploit-CVE2017-8759.j
- • Generic Trojan.iso
- • Generic trojan.i
Changes for v12.1.0.2589 - v12.1.0.2607
- Enhanced Detections:
- • Exploit-CVE2017-8759.h
- • Generic.dx!ofd
Changes for v12.1.0.2569 - v12.1.0.2589
- New Detections:
- • Exploit-CVE2017-8759.h
- Enhanced Detections:
- • Emotet-FDI!
Changes for v12.1.0.2567 - v12.1.0.2569
- Enhanced Detections:
- • Emotet-FCY!
- • Emotet-FDI!
- • Exploit-CVE2016-0189
- • Golroted.gen.n
- • PWS-Emotet.a!
Changes for v12.1.0.2564 - v12.1.0.2567
- New Detections:
- • Exploit-CVE2015-1650
- • Golroted.gen.m
- • Seduploader
- Enhanced Detections:
- • Emotet-FAX!
- • W32/Autorun.worm.aaeh
Changes for v12.1.0.2524 - v12.1.0.2564
- Enhanced Detections:
- • Emotet-FAX!
- • Emotet-FCY!
Changes for v12.1.0.2521 - v12.1.0.2524
- New Detections:
- • Emotet-FAX!
- • Emotet-FCB!
- Enhanced Detections:
- • Exploit-CVE2017-0199.ak
- • Exploit-CVE2017-0199.al
- • Exploit-CVE2017-11791
- • Exploit-CVE2017-11793
- • Exploit-CVE2017-11798
- • Generic Exploit.s
- • Trojan-Veil!rb
Changes for v12.1.0.2509 - v12.1.0.2521
- New Detections:
- • Exploit-CVE2017-0199.al
- • Trojan-Veil!rb
- Enhanced Detections:
- • Exploit-CVE2017-0199.d
Changes for v12.1.0.2508 - v12.1.0.2509
- New Detections:
- • Genkryptic.gen.a
- Enhanced Detections:
- • Exploit-CVE2015-1641!rtf
- • Exploit-CVE2017-0199
- • Exploit-CVE2017-0199.v
- • Golroted.gen.h
- • Trojan-AitInject.o
Changes for v12.1.0.2506 - v12.1.0.2508
- New Detections:
- • P55
- • RTF/Obfus.b
- • Trojan-AitInject.o
- Enhanced Detections:
- • Generic Trojan.j
Changes for v12.1.0.2505 - v12.1.0.2506
- Enhanced Detections:
- • Exploit-CVE2017-0199
- • Generic Downloader.gm
Changes for v12.1.0.2500 - v12.1.0.2504
- New Detections:
- • Exploit-CVE2017-8759
- Enhanced Detections:
- • Exploit-CVE2017-8759.g
- • Generic Trojan.i
Changes for v12.1.0.2497 - v12.1.0.2500
- New Detections:
- • Exploit-CVE2017-8759.g
- Enhanced Detections:
- • Exploit-CVE2017-0199.aa
- • Exploit-CVE2017-8759.d
- • Exploit-CVE2017-8759.e
- • Exploit-CVE2017-8759.f
- • Ransom-GlobeImp
- • Ransomware-Cerber
Changes for v12.1.0.2495 - v12.1.0.2497
- Enhanced Detections:
- • Exploit-CVE2017-0199.d
- • Exploit-CVE2017-8759.b
- • Exploit-CVE2017-8759.c
- • Generic Trojan.i
- • Java/Adwind
Changes for v12.1.0.2493 - v12.1.0.2495
- New Detections:
- • Exploit-CVE2017-8759.d
- • Exploit-CVE2017-8759.e
- • Exploit-CVE2017-8759.f
- Enhanced Detections:
- • Exploit-CVE2017-0199.ah
- • Exploit-CVE2017-0199.ai
- • Exploit-CVE2017-0199.aj
Changes for v12.1.0.2490 - v12.1.0.2493
- New Detections:
- • Exploit-CVE2017-8759.a
- • Exploit-CVE2017-8759.b
- • Exploit-CVE2017-8759.c
- Enhanced Detections:
- • Exploit-CVE2017-0199.ag
Changes for v12.1.0.2468 - v12.1.0.2473
- New Detections:
- • Malformed-Putty
- Enhanced Detections:
- • Generic PWS.o
- • Generic trojan.i
Changes for v12.1.0.2465 - v12.1.0.2468
- Enhanced Detections:
- • Exploit-CVE2017-0199.d
- • Exploit-CVE2017-0199.x
Changes for v12.1.0.2459 - v12.1.0.2465
- Enhanced Detections:
- • Exploit-CVE2017-0199.d
- • Exploit-MS17-010.d
- • Generic Trojan.i
- • Generic Trojan.j
- • JS/Downloader.gen.fa
- • PY/Exploit-MS17-010.a
- • PY/Exploit-MS17-010.b
- • PY/Exploit-MS17-010.c
Changes for v12.1.0.2458 - v12.1.0.2459
- Enhanced Detections:
- • Exploit-CVE2017-0199
- • Generic Trojan.ba
- • Golroted.gen.h
- • Ransom-Spora
Changes for v12.1.0.2457 - v12.1.0.2458
- New Detections:
- • Ransom-Bitpaymer
- • Trojan-TrickBot
- Enhanced Detections:
- • AutoIt/Injector.d
- • PWSZbot-FHN
Changes for v12.1.0.2456 - v12.1.0.2457
- New Detections:
- • Exploit-CVE2017-0199.x
- • Generic PWS.y
- • W32/Prepscram.a
- Enhanced Detections:
- • AutoIt/injector.C
- • Trojan-CoinMiner
Changes for v12.1.0.2455 - v12.1.0.2456
- New Detections:
- • AutoIt/Injector.d
- • Generic Trojan.iso
- • JS/Downloader.gen.fa
- Enhanced Detections:
- • Exploit-CVE2015-2545
Changes for v12.1.0.2454 - v12.1.0.2455
- Enhanced Detections:
- • Exploit-CVE2017-0199
- • Exploit-CVE2017-0199.x
- • Exploit-CVE2017-0199.z
- • Generic PWS.o
- • Generic Trojan.i
- • Generic trojan.i
Changes for v12.1.0.2452 - v12.1.0.2454
- New Detections:
- • P54
- Enhanced Detections:
- • Exploit-CVE2017-0199.y
- • Generic Trojan.i
- • W32/CoinMiner.f
Changes for v12.1.0.2451 - v12.1.0.2452
- New Detections:
- • Exploit-CVE2017-0199.z
- Enhanced Detections:
- • Exploit-CVE2017-0199.w
- • Generic Trojan.ba
Changes for v12.1.0.2443 - v12.1.0.2451
- New Detections:
- • Exploit-CVE2017-0199.y
- Enhanced Detections:
- • Exploit-CVE2017-0199.u
- • Exploit-CVE2017-0199.v
- • Generic PWS.y
- • Generic Trojan.i
- • Generic Trojan.j
- • Golroted.gen.h
Changes for v12.1.0.2441 - v12.1.0.2443
- Enhanced Detections:
- • Exploit-CVE2017-0199.r
- • Exploit-CVE2017-0199.s
- • Exploit-CVE2017-0199.t
- • Generic trojan.i
- • Golroted.gen.g
- • RTF/Obfus.a
Changes for v12.1.0.2435 - v12.1.0.2441
- Enhanced Detections:
- • Generic Trojan.j
- • Generic trojan.i
- • PWSZbot-FHN
Changes for v12.1.0.2432 - v12.1.0.2435
- Enhanced Detections:
- • Exploit-CVE2017-8594
- • Exploit-CVE2017-8598
- • Exploit-CVE2017-8601
- • Exploit-CVE2017-8605
- • Exploit-CVE2017-8617
- • Exploit-CVE2017-8619
Changes for v12.1.0.2430 - v12.1.0.2432
- New Detections:
- • Exploit-CVE2017-0199.s
- • Exploit-CVE2017-0199.t
- • RTF/Obfus.a
- Enhanced Detections:
- • Exploit-CVE2017-0199
- • Exploit-CVE2017-0199.r
- • Golroted.gen.g
- • JS/Exploit-Shellcode.a
- • PWSZbot-FHN
Changes for v12.1.0.2429 - v12.1.0.2430
- New Detections:
- • Ransom-Matrix
- Enhanced Detections:
- • Exploit-CVE2017-0199.d
- • Generic Trojan.az
- • Generic Trojan.i
- • Generic trojan.i
- • PWSZbot-FHN
- • Ransom-O
Changes for v12.1.0.2426 - v12.1.0.2429
- New Detections:
- • AutoIt/injector.C
- • Spora!Trg
- • Spora!mxr
- Enhanced Detections:
- • Generic trojan.i
- • PWSZbot-FHN
Changes for v12.1.0.2424 - v12.1.0.2426
- Enhanced Detections:
- • Generic trojan.i
- • PWSZbot-FHN
Changes for v12.1.0.2421 - v12.1.0.2424
- Enhanced Detections:
- • Generic FakeAlert
- • Generic trojan.i
- • PWSZbot-FHN
- • Ransom-Wannacry.b
Changes for v12.1.0.2406 - v12.1.0.2418
- Enhanced Detections:
- • Generic Trojan.j
- • PWSZbot-FHN
Changes for v12.1.0.2405 - v12.1.0.2406
- Enhanced Detections:
- • Generic Trojan.av
- • Generic trojan.i
Changes for v12.1.0.2403 - v12.1.0.2405
- New Detections:
- • Exploit-CVE2017-0199.n
- • Exploit-CVE2017-0199.o
- • Generic Trojan.av
- • PDF/Generic.a
- Enhanced Detections:
- • Downloader-BCS
- • Generic Trojan.i
- • Generic trojan.i
- • PWSZbot-FHN
Changes for v12.1.0.2401 - v12.1.0.2403
- New Detections:
- • Generic Trojan.au
- Enhanced Detections:
- • Generic trojan.i
- • PWSZbot-FHN
Changes for v12.1.0.2399 - v12.1.0.2401
- New Detections:
- • Trojan-AitInject.N
- Enhanced Detections:
- • Generic trojan.i
- • Java/Adwind
- • PWSZbot-FHN
Changes for v12.1.0.2398 - v12.1.0.2399
- New Detections:
- • Exploit-CVE2017-0199.m
- Enhanced Detections:
- • Exploit-CVE2017-0199
- • Exploit-CVE2017-0199.l
- • Generic Trojan.at
- • Generic Trojan.i
- • Trojan-CoinMiner
Changes for v12.1.0.2388 - v12.1.0.2389
- Enhanced Detections:
- • Generic Trojan.as
- • HackTool-Shadowbrokers
- • JS/Exploit-Rigkit.m
- • Trojan.EternalRocks
Changes for v12.1.0.2383 - v12.1.0.2388
- New Detections:
- • Generic Trojan.as
- • Generic Trojan.x
- • NSIS/ProxyAgent.a
- • NSIS/SchoolBoy.a
- • W32/MSILRsrcRescan
- • Win32/3Proxy.a
- Enhanced Detections:
- • Exploit-CVE2017-0199
- • Generic Trojan.i
- • Generic Trojan.o
- • Generic trojan.i
- • NSIS/ProxyAgent.a
- • NSIS/SchoolBoy.a
- • Ransom-O
- • Ransomware-Cerber
- • with fishy extension
Changes for v12.1.0.2376 - v12.1.0.2383
- New Detections:
- • Generic Trojan.ar
- Enhanced Detections:
- • Exploit-CVE2017-0199
- • Generic Trojan.i
- • Generic Trojan.o
- • Generic trojan.i
- • JS/Redirector.eb
- • NSIS/Addrop
- • PWSZbot-FHN
- • Ransom-WannaCry
- • Ransom-WannaCry!lnk
- • Ransomware-Cerber
Changes for v12.1.0.2374 - v12.1.0.2376
- New Detections:
- • Generic Trojan.an
- Enhanced Detections:
- • Generic.y
- • Ransom-Cerber
- • Ransom-O
Changes for v12.1.0.2372 - v12.1.0.2374
- New Detections:
- • JS/Redirector.eb
- • Ransom-Cerber.j
- Enhanced Detections:
- • Exploit-CVE2017-0199
- • Generic Trojan.o
- • PWSZbot-FHN
- • Ransom-O
- • W32/AdylkuzzMiner
- • W32/Teerac.b
Changes for v12.1.0.2362 - v12.1.0.2372
- New Detections:
- • NSIS/Addrop
- • W32/AdylkuzzMiner
- Enhanced Detections:
- • Generic Trojan.i
- • Generic.y
- • JV/Generic.a
- • Ransom-Spora.b
- • Ransom-WannaCry
Changes for v12.1.0.2358 - v12.1.0.2362
- New Detections:
- • JS/Redirector.ea
- Enhanced Detections:
- • Exploit-CVE2015-1641.b
- • Generic Exploit-RTF.b
- • Generic Exploit-RTF.c
- • Generic Exploit-RTF.d
- • Generic Exploit-RTF.e
- • Generic Trojan.i
- • Generic Trojan.o
- • Java/Adwind
- • PWSZbot-FHN
- • W32/Autorun.worm.aaeh
Changes for v12.1.0.2357 - v12.1.0.2358
- Enhanced Detections:
- • Generic Trojan.j
- • W32/XDocCrypt.a!lnk
- • with fishy extension
Changes for v12.1.0.2355 - v12.1.0.2357
- New Detections:
- • ELF/Sednit
- • OSX/Sofacy
- • W32/Kovter
- Enhanced Detections:
- • Generic Trojan.j
- • OSX/DOK
- • Ransom-Cryptolocker
- • Ransom-O
Changes for v12.1.0.2354 - v12.1.0.2355
- Enhanced Detections:
- • Exploit-CVE2015-1641!rtf
- • Exploit-CVE2017-0199.h
- • Generic Trojan.o
- • PS/Trojan-Injector
- • Ransom-Spora.b
Changes for v12.1.0.2352 - v12.1.0.2354
- New Detections:
- • JV/Generic.a
- Enhanced Detections:
- • Generic PWS.o
- • Generic Trojan.o
- • JS/Exploit-Rigkit.l
- • PWSZbot-FHN
Changes for v12.1.0.2351 - v12.1.0.2352
- New Detections:
- • OSX/DOK
- Enhanced Detections:
- • Exploit-CVE2014-1761!rtf
- • Exploit-CVE2017-0199.d
- • Exploit-CVE2017-0199.e
- • Exploit-CVE2017-0199.f
- • Exploit-CVE2017-0199.g
- • Exploit-CVE2017-0199.h
- • Exploit-CVE2017-0199.i
- • Generic Trojan.i
- • Generic.y
- • JS/Pinkslipbot.c
- • PWSZbot-FHN
- • Ransom-Tescrypt!txt
- • Ransomware-Cerber
- • Ransomware-Locky.h!enc
- • VBS/BackDoor-NJRat
Changes for v12.1.0.2348 - v12.1.0.2351
- Enhanced Detections:
- • W32/Autorun.worm.aaeh
Changes for v12.1.0.2347 - v12.1.0.2348
- New Detections:
- • P52
- Enhanced Detections:
- • Exploit-CVE2017-0199.i
- • Generic Trojan.c
Changes for v12.1.0.2345 - v12.1.0.2347
- New Detections:
- • PS/Trojan-Injector
- Enhanced Detections:
- • PWSZbot-FHN
- • Ransom-O
- • VBS/PWS-Dumper.a
Changes for v12.1.0.2344 - v12.1.0.2345
- Enhanced Detections:
- • Exploit-CVE2017-0199.d
- • Exploit-CVE2017-0199.h
- • Generic Trojan.j
- • Generic Trojan.o
- • Generic.y
- • PWSZbot-FHN
- • Ransomware-Cerber
- • with fishy extension
Changes for v12.1.0.2343 - v12.1.0.2344
- New Detections:
- • Exploit-CVE2017-0199.h
- Enhanced Detections:
- • Backdoor-PlugX!DAT
- • Exploit-CVE2017-0199.d
- • Fariet.gen.a
- • Generic Trojan.o
- • PWSZbot-FHN
Changes for v12.1.0.2341 - v12.1.0.2343
- Enhanced Detections:
- • Exploit-CVE2017-0199.d
- • Generic Trojan.o
- • PWSZbot-FHN
- • Ransom-O
- • Ransomware-Cerber
- • SWF/Exploit-Rig.h
- • W32/Teerac.b
- • with fishy extension
Changes for v12.1.0.2339 - v12.1.0.2341
- New Detections:
- • Exploit-CVE2017-0199.e
- • Exploit-CVE2017-0199.f
- • Exploit-CVE2017-0199.g
- • HackTool-Shadowbrokers
- Enhanced Detections:
- • Exploit-CVE2012-0158.s
- • Exploit-CVE2017-0199
- • Exploit-CVE2017-0199.c
- • Exploit-CVE2017-0199.d
- • Exploit-CVE2017-0199.f
- • FakeAlert-av360
- • Generic Trojan.o
- • HackTool-Shadowbrokers
- • PWS-Zbot.gen.po
- • PWSZbot-FHN
- • Trojan-Powelike
Changes for v12.1.0.2328 - v12.1.0.2339
- New Detections:
- • Exploit-CVE2017-0199
- • Exploit-CVE2017-0199.b
- • Exploit-CVE2017-0199.c
- • Exploit-CVE2017-0199.d
- Enhanced Detections:
- • Exploit-CVE2017-0199.b
- • Exploit-CVE2017-0199.c
- • Exploit-CVE2017-0199.d
- • Generic Trojan.i
- • PWS-Dridex
- • PWSZbot-FHN
- • Trojan-Dridex
- • Trojan-FLYZ!enc
Changes for v12.1.0.2287 - v12.1.0.2302
- New Detections:
- • NSIS/ObfusRansom.w
- Enhanced Detections:
- • Exploit-CVE2012-0158.s
- • Generic PWS.o
- • Generic Trojan.j
- • PWSZbot-FHN
Changes for v12.1.0.2286 - v12.1.0.2287
- New Detections:
- • Exploit-CVE2017-0037
- • Face.1281
- • Ghost.5000a
- • Gon
- • Gorlovka.1024
- • JS/Redirector.dw
- • LJF.1098
- • LL.579
- • LetterH
- • Letuchki
- • Lexotran
- • Lightning.2366
- • Lizza.1125
- • Lunch.783
- • MNA.2876
- • Mel.1537
- • NSIS/ObfusRansom.v
- • Nina.256
- • OSX/MacDownloader.a
- • Olpho.2033
- • PDP
- • Quail.414
- • Raving.sub.2300
- • Rebelbase.1509
- • Rebirth.726
- • Red.1465
- • SVCa
- • Uncle.767
- • Vampiro
- • Vanq
- • Vg
- • Vibrant.4086
- • Vic.793
- • Vigo.1000
- • Viking.100
- Enhanced Detections:
- • Exploit-SWF
- • Generic Trojan.ai
- • JS/Exploit-Rigkit.k
- • OSX/Ransom.FileCoder.e
- • PWSZbot-FHN
- • Ransom-Spora
Changes for v12.1.0.2269 - v12.1.0.2286
- New Detections:
- • Exploit-SWF.by
- Enhanced Detections:
- • Generic Trojan.i
- • Generic Trojan.o
- • Ransom-Cerber!html
- • Ransomware-Cerber
- • Ransomware-Locky.g
Changes for v12.1.0.2236 - v12.1.0.2237
- New Detections:
- • Ransom-Spora.b
- • VBS/Downloader.eh
- Enhanced Detections:
- • Exploit-CVE2016-7286
- • Generic Trojan.i
- • PWSZbot-FHN
- • Ransom-O
- • Ransomware-Cerber
- • with fishy extension
Changes for v12.1.0.2222 - v12.1.0.2236
- New Detections:
- • NSIS/ObfusRansom.q
- • Ransomware-Cerber
- Enhanced Detections:
- • Exploit-CVE2016-7200.a
- • Exploit-CVE2016-7201.a
- • Exploit-CVE2016-7288
- • Generic Trojan.ae
- • NSIS/ObfusRansom.d
- • NSIS/ObfusRansom.p
- • PWSZbot-FHN
- • Ransom-O
- • Trojan-CoinMiner
Changes for v12.1.0.2170 - v12.1.0.2171
- New Detections:
- • FakeTC.a
- • Generic Trojan.ai
- • Generic Trojan.c
- • Ransomware-Locky.h!enc
- Enhanced Detections:
- • Generic Trojan.ad
- • Generic Trojan.i
- • PWSZbot-FHN
- • Vawtrak.gen.a
Changes for v12.1.0.2153 - v12.1.0.2170
- New Detections:
- • Exploit-CVE2015-1641
- • PoweDuke
- Enhanced Detections:
- • Exploit-CVE2012-0158.ad
- • Exploit-CVE2016-7198
- • Exploit-CVE2016-7200
- • Exploit-CVE2016-7201
- • Generic Exploit-RTF.a
- • PWSZbot-FHN
- • Ransomware-Locky.f!enc
- • Ransomware-Locky.g
- • VBS/BackDoor-NJRat
Changes for v12.1.0.2144 - v12.1.0.2153
- New Detections:
- • BAT/Agent
- • BrMediaPlayer.a
- • Exploit-SWF.bl
- • Exploit-SWF.bm
- • JS/Exploit-Rigkit.f
- • JS/Exploit-SundownEK
- • NSIS/ObfusRansom.h
- • SWF/Exploit-Neutrino.a
- • SWF/Exploit-Rig.a
- • SWF/Exploit-Rig.b
- • SWF/Exploit-Rig.c
- • SWF/Exploit-Rig.d
- • SWF/Exploit-Rig.e
- • SWF/Exploit-Rig.f
- • Trojan-AitInject.I
- Enhanced Detections:
- • Exploit-CVE2016-3298
- • Exploit-RTF
- • Exploit-SWF.bk
- • Generic PWS.o
- • Generic Packed.ace
- • Generic Trojan.aa
- • Generic Trojan.ab
- • Generic Trojan.i
- • Generic Trojan.j
- • JS/Exploit-Rigkit.e
- • JS/Lnkpull.a
- • PWSZbot-FHN
- • Ransom-Cerber!html
- • Ransom-O
- • Ransomware-Locky
- • Ransomware-Locky.f!enc
- • SWF/ExploitKit.l
- • Trojan-AitInject.H
- • Vawtrak.gen.a
Changes for v12.1.0.2140 - v12.1.0.2144
- New Detections:
- • Exploit-CVE2016-3298
- Enhanced Detections:
- • Exploit-CVE2015-2545
- • PWSZbot-FHN
Changes for v12.1.0.2136 - v12.1.0.2140
- New Detections:
- • PWS-Zbot.gen.yz
- Enhanced Detections:
- • Generic Packed.ace
- • Generic Trojan.aa
- • Generic Trojan.i
- • NSIS/ObfusRansom.d
- • PWSZbot-FHN
- • Ransomware-Locky.d!enc
Changes for v12.1.0.2135 - v12.1.0.2136
- Enhanced Detections:
- • NSIS/ObfusRansom.d
Changes for v12.1.0.2134 - v12.1.0.2135
- New Detections:
- • NSIS/ObfusRansom.e
- Enhanced Detections:
- • Exploit-CVE2012-0158.n
- • Exploit-CVE2016-3377
- • Generic PWS.o
- • Generic Trojan.i
- • Golroted.gen.f
- • NSIS/ObfusRansom.a
- • OSX/Komplex.d
- • PWSZbot-FHN
- • Ransomware-Locky.d!enc
- • W32/Pate
Changes for v12.1.0.2126 - v12.1.0.2134
- New Detections:
- • Exploit-CVE2016-3351
- • Kovter!remnants
- Enhanced Detections:
- • Exploit-CVE2015-1641!rtf
- • Exploit-CVE2015-2545
- • Exploit-SWF.bk
- • JS/Exploit-Rigkit.c
- • JS/Locky.m
- • JS/Locky.n
- • NSIS/ObfusRansom.d
- • OSX/Komplex.a
- • OSX/Komplex.b
- • OSX/Komplex.c
- • PWSZbot-FHN
- • Ransom-O
- • Ransomware-Locky.d!enc
- • Ransomware-Locky.e!enc
- • SWF/ExploitKit.n
- • Trojan-CoinMiner
Changes for v12.1.0.2108 - v12.1.0.2126
- New Detections:
- • BAT/Del
- • JS/Exploit-Rigkit.c
- Enhanced Detections:
- • Generic Trojan.i
- • PWSZbot-FHN
- • Ransom-Cerber
- • Ransomware-Locky.e!enc
Changes for v12.1.0.2094 - v12.1.0.2099
- New Detections:
- • Exploit-SWF.bk
- • SWF/ExploitKit.l
- Enhanced Detections:
- • Exploit-CVE2012-0158.aa
- • Generic Trojan.i
- • Generic Trojan.j
- • Neutrino-ExploitKit.h
- • Ransomware-Locky.d!enc
- • SWF/ExploitKit.f
Changes for v12.1.0.2092 - v12.1.0.2094
- New Detections:
- • Exploit-CVE2012-0158.ab
- • Exploit-CVE2012-0158.ac
- • Exploit-CVE2016-0189
- • Exploit-CVE2016-3290
- • Exploit-SWF.bj
- • Generic Packed.s
- • Generic Packed.t
- • MSIL/Packed.a
- • Trojan-PoweLike
- • Trojan-PoweLike!bat
- • Trojan-PoweLike!lnk
- Enhanced Detections:
- • Exploit-CVE2012-0158.aa
- • Generic Exploit.f
- • Generic PWS.o
- • Generic Trojan.i
- • HTML/Neutrino.d
- • HTML/Neutrino.e
- • PWSZbot-FHN
- • Ransom-O
- • Ransomware-Locky.d!enc
- • Stuxnet
- • Trojan-Fareit.c
- • VBS/Autorun.worm.k
Changes for v12.1.0.2089 - v12.1.0.2092
- New Detections:
- • Exploit-CVE2012-0158.ab
- • Exploit-CVE2012-0158.ac
- • Exploit-CVE2016-0189
- • Exploit-CVE2016-3290
- • Exploit-SWF.bj
- Enhanced Detections:
- • Exploit-CVE2012-0158.aa
- • Generic Exploit.f
- • Generic PWS.o
- • Generic Trojan.i
- • HTML/Neutrino.d
- • HTML/Neutrino.e
- • PWSZbot-FHN
- • Ransom-O
- • Ransomware-Locky.d!enc
- • Stuxnet
- • Trojan-Fareit.c
- • VBS/Autorun.worm.k
Changes for v12.1.0.2088 - v12.1.0.2089
- New Detections:
- • Exploit-CVE2012-0158.ab
- • Exploit-CVE2012-0158.ac
- • Exploit-CVE2016-0189
- • Exploit-CVE2016-3290
- Enhanced Detections:
- • Exploit-CVE2012-0158.aa
- • Generic PWS.o
- • HTML/Neutrino.d
- • HTML/Neutrino.e
- • PWSZbot-FHN
- • Ransom-O
- • Ransomware-Locky.d!enc
- • Stuxnet
- • Trojan-Fareit.c
- • VBS/Autorun.worm.k
Changes for v12.1.0.2087 - v12.1.0.2088
- New Detections:
- • Exploit-CVE2012-0158.ab
- • Exploit-CVE2016-3290
- Enhanced Detections:
- • Exploit-CVE2012-0158.aa
- • HTML/Neutrino.e
- • PWSZbot-FHN
- • Ransom-O
- • Ransomware-Locky.d!enc
- • Stuxnet
- • Trojan-Fareit.c
- • VBS/Autorun.worm.k
Changes for v12.1.0.2086 - v12.1.0.2087
- New Detections:
- • Exploit-CVE2016-3290
- Enhanced Detections:
- • PWSZbot-FHN
- • Ransom-O
- • Ransomware-Locky.d!enc
- • Stuxnet
- • Trojan-Fareit.c
Changes for v12.1.0.2085 - v12.1.0.2086
- New Detections:
- • Exploit-CVE2016-3290
- Enhanced Detections:
- • PWSZbot-FHN
- • Ransom-O
- • Ransomware-Locky.d!enc
- • Trojan-Fareit.c
Changes for v12.1.0.2082 - v12.1.0.2085
- New Detections:
- • HTML/Neutrino.e
- • Neutrino-ExploitKit.h
- Enhanced Detections:
- • Generic Trojan.i
- • HTML/Neutrino.c
- • JS/Exploit-Blacole.ht
- • PWSZbot-FHN
- • Ransomware-Locky.e!enc
- • SWF/ExploitKit.f
- • SWF/ExploitKit.g
Changes for v12.1.0.2079 - v12.1.0.2082
- New Detections:
- • Exploit-CVE2012-0158.aa
- • Ransom-Cerber
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • Exploit-CVE2012-0158.z
- • Generic PWS.o
- • Generic Packed.ace
- • Generic Trojan.i
- • Golroted.gen.f
- • PWSZbot-FHN
- • Ransomware-Locky.d!enc
- • SWF/ExploitKit.j
- • SWF/ExploitKit.k
Changes for v12.1.0.2076 - v12.1.0.2079
- New Detections:
- • Exploit-CVE2012-0158.z
- • Exploit-CVE2016-0099
- • Generic Trojan.v
- • SWF/ExploitKit.j
- • SWF/ExploitKit.k
- Enhanced Detections:
- • Generic Trojan.i
- • PWSZbot-FHN
- • Ransomware-Locky.d!enc
Changes for v12.1.0.2075 - v12.1.0.2076
- Enhanced Detections:
- • PWSZbot-FHN
- • Ransomware-Locky.d!enc
- • W32/CoinMiner.d
Changes for v12.1.0.2072 - v12.1.0.2075
- New Detections:
- • Neutrino-ExploitKit.d
- • Neutrino-ExploitKit.e
- • Neutrino-ExploitKit.f
- • SWF/ExploitKit.f
- • SWF/ExploitKit.g
- • SWF/ExploitKit.h
- • SWF/ExploitKit.i
- • Trojan-FJHT!dat
- Enhanced Detections:
- • HTML/Neutrino.b
- • SWF/ExploitKit.c
- • SWF/ExploitKit.d
- • SWF/ExploitKit.e
Changes for v12.1.0.2052 - v12.1.0.2072
- New Detections:
- • Exploit-CVE2016-3240
- • Trojan-KillAV
- Enhanced Detections:
- • PWSZbot-FHN
- • Ransomware-Locky.d!enc
Changes for v12.1.0.2041 - v12.1.0.2052
- New Detections:
- • Exploit-CVE2012-0158.s
- • Exploit-CVE2012-0158.t
- Enhanced Detections:
- • Exploit-SWF
- • Exploit-SWF.bh
- • Generic Trojan.z
- • PWSZbot-FHN
- • Ransom-O
Changes for v12.1.0.2037 - v12.1.0.2041
- New Detections:
- • Exploit-CVE2014-6332.a
- • Exploit-CVE2016-3199
- • Exploit-CVE2016-3234
- • HTML/Neutrino.a
- Enhanced Detections:
- • Generic Trojan.i
Changes for v12.1.0.2034 - v12.1.0.2037
- New Detections:
- • Generic Trojan.t
- Enhanced Detections:
- • Exploit-CVE2015-2545.a
- • Exploit-SWF.ba
- • Exploit-SWF.bb
- • Neutrino-ExploitKit.a
- • Neutrino-ExploitKit.b
- • Ransom-O
Changes for v12.1.0.2032 - v12.1.0.2034
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • Generic Exploit-RTF.a
- • Golroted.gen.a
- • JS/Downloader
Changes for v12.1.0.2027 - v12.1.0.2032
- New Detections:
- • Ransom-Exxroute!htm
- Enhanced Detections:
- • Generic Trojan.i
- • Generic Trojan.o
- • JS/Exploit-Angler.n
- • Ransom-O
- • VBS/Downloader.cn
Changes for v12.1.0.2004 - v12.1.0.2006
- Enhanced Detections:
- • Exploit-CVE2015-2545
- • Exploit-CVE2016-0155
- • Generic PWS.o
- • Generic Packed.ace
- • JS/Exploit
Changes for v12.1.0.2003 - v12.1.0.2004
- New Detections:
- • Trojan-FIGN
- • Trojan-FIKV
- Enhanced Detections:
- • Exploit-CVE2015-2545
- • Generic Trojan.j
- • ZeroAccess!cfg
Changes for v12.1.0.2002 - v12.1.0.2003
- Enhanced Detections:
- • Generic Trojan.i
Changes for v12.1.0.2001 - v12.1.0.2002
- New Detections:
- • Golroted.gen.a
- • JS/Exploit-Angler.p
- • Trojan-AitInject.F
- • VBS/Trojan-B
- Enhanced Detections:
- • Corebot!mxr
- • Exploit-SWF
- • Generic Trojan.i
- • Generic Trojan.z
- • Ransom-O
- • Trojan-Dridex
Changes for v12.1.0.1924 - v12.1.0.1945
- New Detections:
- • Exploit-CVE2010-3333.o
- Enhanced Detections:
- • Exploit-RTF
- • JS/Exploit-Angler.a
- • Malformed-PDF
- • PHP/Ransom-CTB
- • PWS-Zbot
Changes for v12.1.0.1919 - v12.1.0.1924
- Enhanced Detections:
- • PWS-Zbot
Changes for v12.1.0.1910 - v12.1.0.1912
- New Detections:
- • JS/Exploit-Rigkit.b
- Enhanced Detections:
- • Downloader-CJX!lnk
- • Exploit-CVE2012-0158!rtf
- • Exploit-SWF.ae
- • Fareit!eml
- • JS/Pinkslipbot
- • ZeroAccess!cfg
Changes for v12.1.0.1904 - v12.1.0.1907
- Enhanced Detections:
- • BAT/DelAll
- • JS/Exploit-Angler
- • PWS-Zbot
Changes for v12.1.0.1897 - v12.1.0.1904
- New Detections:
- • Generic Packed.ace
- • JS/Exploit!dam
- Enhanced Detections:
- • Generic Trojan.i
- • Java/Adwind
- • W32/Pinkslipbot
Changes for v12.1.0.1894 - v12.1.0.1897
- Enhanced Detections:
- • PWS-Dridex
Changes for v12.1.0.1866 - v12.1.0.1894
- New Detections:
- • BAT/DelAll
- • JS/Pinkslipbot
- • W32/Pinkslipbot!job
- Enhanced Detections:
- • Adware-Eorezo
- • Generic Trojan.i
- • Generic Trojan.j
- • JS/Exploit-Angler
- • Ransom-Tescrypt
- • W32/CoinMiner.e
Changes for v12.1.0.1858 - v12.1.0.1866
- Enhanced Detections:
- • Ransom-O
Changes for v12.1.0.1854 - v12.1.0.1858
- New Detections:
- • Ransom-Node
- Enhanced Detections:
- • Generic Trojan.j
Changes for v12.1.0.1853 - v12.1.0.1854
- New Detections:
- • Exploit-CVE2015-6172!rtf
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • Exploit-CVE2015-8651
Changes for v12.1.0.1852 - v12.1.0.1853
- New Detections:
- • Exploit-CVE2015-2387
- Enhanced Detections:
- • Generic Trojan.i
Changes for v12.1.0.1851 - v12.1.0.1852
- Enhanced Detections:
- • Exploit-SWF
- • Generic Trojan.i
- • Generic Trojan.j
Changes for v12.1.0.1847 - v12.1.0.1851
- Enhanced Detections:
- • Generic Trojan.j
- • JS/Exploit-Blacole.ko
Changes for v12.1.0.1842 - v12.1.0.1847
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • Exploit-CVE2015-2419
- • Exploit-SWF.ar
- • Generic Trojan.i
- • Generic Trojan.j
- • Ransom-Tescrypt
Changes for v12.1.0.1837 - v12.1.0.1842
- Enhanced Detections:
- • Generic PWS.o
- • Java/Adwind
Changes for v12.1.0.1832 - v12.1.0.1837
- Enhanced Detections:
- • Generic PWS.o
- • Generic Trojan.j
- • Ransom-Tescrypt
- • Trojan-Fareit.a
- • W32/CoinMiner.d
Changes for v12.1.0.1796 - v12.1.0.1798
- New Detections:
- • JS/Exploit-Angler.k
- Enhanced Detections:
- • 1
- • Exploit-MSExcel.r
- • FakeAlert-AU
- • FakeAlert-AntiVirusXP
- • FakeAlert-SpyKiller
- • Generic Exploit.p
- • Generic Trojan.r
Changes for v12.1.0.1792 - v12.1.0.1796
- New Detections:
- • Exploit-Axpergle!swf
- • Trojan-Veil
- • VBS/PWS-Banker.gen.gn
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • Exploit-SWF
- • Generic Downloader.z
- • Generic PWS.o
- • Generic Trojan.j
- • Generic Trojan.o
- • Generic Trojan.p
- • Generic Trojan.r
- • JS/Exploit-Angler.a
- • PWS-Zbot
- • Ransom-O
- • W32/Autorun.worm.hm
- • ZergRush
Changes for v12.1.0.1779 - v12.1.0.1780
- Enhanced Detections:
- • Exploit-SWF.am
- • Exploit-SWF.an
- • W32/Autorun.worm.c
Changes for v12.1.0.1771 - v12.1.0.1779
- Enhanced Detections:
- • Crossrider
- • PWS-Zbot
Changes for v12.1.0.1764 - v12.1.0.1771
- Enhanced Detections:
- • Exploit-SWF
- • Generic Trojan.j
- • Generic Trojan.o
- • Java/Adwind
- • PWS-Zbot
Changes for v12.1.0.1750 - v12.1.0.1753
- Enhanced Detections:
- • Exploit-SWF.ae
- • SWF/Exploit.b
Changes for v12.1.0.1748 - v12.1.0.1750
- New Detections:
- • Generic Trojan.r
- • Ransom-TeslaCrypt
- Enhanced Detections:
- • JS/Bondat.c!lnk
- • VBS/PWS-Banker.gen.gm
Changes for v12.1.0.1744 - v12.1.0.1748
- Enhanced Detections:
- • Generic Exploit.n
- • Generic Trojan.j
Changes for v12.1.0.1743 - v12.1.0.1744
- New Detections:
- • JS/Bondat.c!lnk
- • VBS/PWS-Banker.gen.gm
- Enhanced Detections:
- • Adware-Eorezo
- • Generic Trojan.j
Changes for v12.1.0.1741 - v12.1.0.1743
- New Detections:
- • JS/Bondat.c!lnk
- • VBS/PWS-Banker.gen.gm
- Enhanced Detections:
- • Adware-Eorezo
- • Generic Trojan.j
Changes for v12.1.0.1737 - v12.1.0.1741
- New Detections:
- • VBS/PWS-Banker.gen.gl
- Enhanced Detections:
- • Generic FakeAlert.n
- • Generic PWS.o
- • Generic Trojan.j
- • Generic Trojan.o
- • Java/Adwind
- • Ransom-O
Changes for v12.1.0.1723 - v12.1.0.1737
- New Detections:
- • SWF/Exploit.b
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • Generic Trojan.j
- • Generic Trojan.o
- • Generic Trojan.p
- • JS/Exploit-Blacole.ml
- • Ransom-O
- • VBS/Trojan-A
Changes for v12.1.0.1722 - v12.1.0.1723
- New Detections:
- • Exploit-CVE2015-2486
- Enhanced Detections:
- • Exploit-CVE2014-1761
- • Generic Trojan.j
- • Generic Trojan.o
Changes for v12.1.0.1721 - v12.1.0.1722
- New Detections:
- • Exploit-CVE2012-0158!h
- • Exploit-SWF.al
- Enhanced Detections:
- • Generic Trojan.q
- • JS/Exploit-Blacole.ld
Changes for v12.1.0.1716 - v12.1.0.1721
- New Detections:
- • Exploit-CVE2015-2485
Changes for v12.1.0.1715 - v12.1.0.1716
- New Detections:
- • Exploit-CVE2015-2546
- • Miuref
- Enhanced Detections:
- • Exploit-SWF
Changes for v12.1.0.1708 - v12.1.0.1715
- New Detections:
- • Exploit-SWF.aj
- • Exploit-SWF.ak
- Enhanced Detections:
- • Exploit-SWF.ai
- • Generic Trojan.q
- • JS/Redirector
Changes for v12.1.0.1705 - v12.1.0.1708
- Enhanced Detections:
- • Generic PWS.o
- • Generic Trojan.j
Changes for v12.1.0.1704 - v12.1.0.1705
- Enhanced Detections:
- • Exploit-SWF.ad
- • Generic Trojan.j
- • JS/Exploit-Angler.a
- • Ransom-O
Changes for v12.1.0.1703 - v12.1.0.1704
- New Detections:
- • RansomCTB-FAF
Changes for v12.1.0.1691 - v12.1.0.1698
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • Generic Downloader.z
Changes for v12.1.0.1687 - v12.1.0.1691
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • Exploit-CVE2015-2442
- • Exploit-CVE2015-2502
- • Ransom-O
Changes for v12.1.0.1684 - v12.1.0.1687
- New Detections:
- • SWF/Exploit-CVE-2015-3043
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • Exploit-CVE2015-0359
- • Exploit-CVE2015-2450
- • Exploit-CVE2015-2452
- • Generic Exploit.q
- • Generic PWS.o
- • Java/Adwind
- • Ransom-O
Changes for v12.1.0.1683 - v12.1.0.1684
- Enhanced Detections:
- • Generic Trojan.j
Changes for v12.1.0.1682 - v12.1.0.1683
- New Detections:
- • Exploit-CVE2015-2442
- • Trojan-FGYD
- • VBS/PWS-Banker.gen.gk
- Enhanced Detections:
- • Generic Trojan.j
Changes for v12.1.0.1678 - v12.1.0.1682
- New Detections:
- • Exploit-CVE-2015-3043
- Enhanced Detections:
- • Generic Trojan.j
Changes for v12.1.0.1675 - v12.1.0.1678
- New Detections:
- • Exploit-CVE2015-2450
- • Exploit-CVE2015-2452
- Enhanced Detections:
- • Exploit-CVE-2015-5122
- • Generic PWS.o
Changes for v12.1.0.1674 - v12.1.0.1675
- New Detections:
- • Exploit-CVE2015-2502
- • Generic Trojan.q
- Enhanced Detections:
- • FakeAlert-WinWebSec!env.h
Changes for v12.1.0.1671 - v12.1.0.1674
- Enhanced Detections:
- • Generic Trojan.j
- • Ransom-O
Changes for v12.1.0.1665 - v12.1.0.1671
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • Exploit-CVE2012-0158!g
- • Exploit-SWF.x
- • W32/Autorun.worm.c
Changes for v12.1.0.1650 - v12.1.0.1665
- Enhanced Detections:
- • JS/Exploit.b
- • JS/Exploit.c
- • SWF/Exploit-CVE-2015-5119.b
Changes for v12.1.0.1648 - v12.1.0.1650
- Enhanced Detections:
- • Generic Trojan.j
- • Java/Adwind
- • SWF/Exploit-CVE-2015-5119.a
Changes for v12.1.0.1552 - v12.1.0.1553
- Enhanced Detections:
- • Kovter
- • Ransom-Posh
- • Ransom-Posh.b
- • TDSS.d
- • Trojan-CTBLocker!env
Changes for v12.1.0.1551 - v12.1.0.1552
- New Detections:
- • Generic.wd
- • Generic.we
- • Generic.wf
- • Generic.wg
- • W97/Downloader
- Enhanced Detections:
- • W32/Autorun.worm.c
Changes for v12.1.0.1543 - v12.1.0.1551
- Enhanced Detections:
- • 1
- • Adware-Bprotect
- • Adware-Bprotect.a
- • Adware-Bprotect.b
- • Generic PWS.o
- • Kuluoz
- • NTRootKit-K
- • PWS-Zbot
- • Trojan-Powelike
- • Zeroaccess.reg!env
Changes for v12.1.0.1527 - v12.1.0.1543
- New Detections:
- • JS/Exploit-Angler.i
- Enhanced Detections:
- • JS/Redirector
- • Ransom-O
Changes for v12.1.0.1526 - v12.1.0.1527
- New Detections:
- • Kovter
- Enhanced Detections:
- • Exploit-CVE2015-0311
- • Exploit-CVE2015-1665
- • Exploit-SWF.v
- • Generic PWS.o
- • JS/Exploit-Angler.g
- • JS/Exploit-Angler.h
- • JS/Exploit.h
- • JS/Exploit.i
- • Ransom-CTB
Changes for v12.1.0.1523 - v12.1.0.1526
- Enhanced Detections:
- • Exploit-SWF.t
- • Exploit-SWF.x
- • Generic PWS.o
- • Ransom-O
- • SWF/Exploit-Anogre.b
- • W32/Autorun.worm.c
Changes for v12.1.0.1514 - v12.1.0.1523
- New Detections:
- • Exploit-CVE2012-0158!c
- Enhanced Detections:
- • Generic PWS.o
Changes for v12.1.0.1507 - v12.1.0.1514
- New Detections:
- • Generic.wb
- • Generic.wc
- Enhanced Detections:
- • Generic Trojan.i
- • Generic.vz
- • Generic.wb
- • Ransom-O
Changes for v12.1.0.1504 - v12.1.0.1507
- New Detections:
- • JS/Exploit-Angler.h
- Enhanced Detections:
- • Generic PWS.o
- • JS/Exploit-Angler.f
Changes for v12.1.0.1503 - v12.1.0.1504
- New Detections:
- • Exploit-SWF.v
- • JS/Exploit-Angler.g
- • JS/Exploit.h
- • JS/Exploit.i
- Enhanced Detections:
- • Exploit-CVE2012-0158!b
- • Generic PWS.o
Changes for v12.1.0.1498 - v12.1.0.1503
- Enhanced Detections:
- • Kuluoz
- • Ransom-O
Changes for v12.1.0.1495 - v12.1.0.1498
- New Detections:
- • Exploit-SWF.y
- Enhanced Detections:
- • Exploit-SWF.x
- • Generic Trojan.p
- • JS/Exploit-Angler.a
- • JS/Exploit-Angler.e
- • JS/Exploit-Angler.f
- • Ransom-O
- • Ransom-Tescrypt
- • W32/Conficker.worm
- • W32/Conficker.worm.gen.b
Changes for v12.1.0.1491 - v12.1.0.1495
- New Detections:
- • Exploit-SWF.x
- Enhanced Detections:
- • Generic Trojan.j
- • Ransom-O
- • Ransom-Tescrypt
Changes for v12.1.0.1471 - v12.1.0.1472
- New Detections:
- • Exploit-CVE2015-1665
- Enhanced Detections:
- • Exploit-CVE2014-1761
- • Generic Trojan.o
- • PWS-Dridex
Changes for v12.1.0.1466 - v12.1.0.1471
- Enhanced Detections:
- • PWS-Dridex
- • Ransom-Tescrypt
Changes for v12.1.0.1435 - v12.1.0.1441
- New Detections:
- • Trojan-PowerShell
- Enhanced Detections:
- • Exploit-CVE2012-0158.g
- • Exploit-CVE2012-0158.j
- • Exploit-SWF.p
- • Exploit-SWF.q
- • Generic Exploit.p
- • Generic Trojan.i
- • Generic.ux
- • Generic.vt
- • PWS-Dridex
Changes for v12.1.0.1430 - v12.1.0.1435
- New Detections:
- • Generic.vt
- Enhanced Detections:
- • FakeAlert-FHR
- • Generic PWS.o
- • Generic Trojan.n
- • Generic.vm
- • Generic.vt
- • W32/Virut
Changes for v12.1.0.1423 - v12.1.0.1430
- New Detections:
- • JS/Exploit-Angler.d
- Enhanced Detections:
- • Generic.vi
- • Generic.vm
Changes for v12.1.0.1412 - v12.1.0.1423
- New Detections:
- • Generic.vo
- • W32/NionSpy
- Enhanced Detections:
- • Exploit-CVE2012-0158.g
- • Exploit-CVE2012-0158.j
- • Generic Trojan.i
- • Generic.ux
Changes for v12.1.0.1411 - v12.1.0.1412
- New Detections:
- • JS/Exploit.e
- • W32/NionSpy
- Enhanced Detections:
- • Exploit-CVE2012-0158.f
- • Generic Exploit.g
- • Generic.ux
- • Generic.vn
Changes for v12.1.0.1408 - v12.1.0.1411
- New Detections:
- • Exploit-CVE2012-0158.g
- • Exploit-CVE2012-0158.h
- • Exploit-CVE2012-0158.i
- • PWS-ZBot.gen.avn
- • Trojan-XSWKit
- • W97M/Downloader.aen
- Enhanced Detections:
- • Java/Adwind
- • Ransom-O
- • W32/Rimecud.gen.aw
Changes for v12.1.0.1405 - v12.1.0.1408
- New Detections:
- • Exploit-CVE2012-0158.g
- Enhanced Detections:
- • W32/Rimecud.gen.aw
- • W97M/Downloader.aef
Changes for v12.1.0.1401 - v12.1.0.1405
- New Detections:
- • Generic.vn
- • W97M/Downloader.aef
- • W97M/Downloader.aeg
- • W97M/Downloader.aej
- • W97M/Downloader.aek
- Enhanced Detections:
- • Exploit-CVE2012-0158.d
- • Exploit-CVE2012-0158.e
- • Exploit-CVE2012-0158.f
- • Exploit-CVE2015-0048
- • Exploit-CVE2015-0313
Changes for v12.1.0.1396 - v12.1.0.1401
- New Detections:
- • Exploit-CVE2012-0158.f
- • Generic.vl
- • W32/DocumentCrypt
- Enhanced Detections:
- • Exploit-CVE2012-0158.b
- • Exploit-CVE2012-0158.c
- • Generic PWS.o
- • Generic.ux
- • Generic.vk
- • W97M/Downloader.aee
Changes for v12.1.0.1392 - v12.1.0.1396
- New Detections:
- • W97M/Downloader.aee
- Enhanced Detections:
- • Generic.ux
- • Generic.vk
- • Java/Adwind
Changes for v12.1.0.1380 - v12.1.0.1392
- New Detections:
- • Exploit-CVE2012-0158.d
- • Exploit-CVE2012-0158.e
- • W32/Ramnit!remnants
- • W32/Ramnit!rtf
- • W32/Ramnit!trace
- • W32/Ramnit.a
- • W32/Ramnit.a!htm
- • W32/Ramnit.a!inf
- • W32/Ramnit.a.dr
- • W32/Ramnit.b
- • W32/Ramnit.c
- • W32/Ramnit.d
- • W32/Ramnit.dr
- • W32/Ramnit.f
- • W32/Ramnit.g
- • W32/Ramnit.gen.b
- • W32/Ramnit.gen.c
- • W32/Ramnit.h
- • W32/Ramnit.i
- • W32/Ramnit.j
- • W32/Ramnit.k
- • W32/Ramnit.l
- • W32/Ramnit.m
- • W32/Ramnit.n
- • W97M/Dropper
- • X97M/Dropper
- Enhanced Detections:
- • Exploit-SWF.k
- • Exploit-SWF.m
- • Generic Exploit.f
- • Generic.ux
- • Generic.vk
- • W32/Ramnit
- • W32/Ramnit!remnants
- • W32/Ramnit.a
- • W32/Ramnit.a!htm
- • W32/Ramnit.a.dr
- • W32/Ramnit.dr
- • X97M/Dropper
Changes for v12.1.0.1352 - v12.1.0.1380
- New Detections:
- • Exploit-SWF.k
- Enhanced Detections:
- • Generic Exploit.p
- • Generic.ux
- • Generic.vg
- • Generic.vh
Changes for v12.1.0.1346 - v12.1.0.1352
- New Detections:
- • Exploit-CVE2015-0044
- • PWS-ZBot.gen.avm
- Enhanced Detections:
- • Generic Exploit
- • Generic.ux
Changes for v12.1.0.1336 - v12.1.0.1346
- New Detections:
- • Trojan-Powelike
- Enhanced Detections:
- • Generic PWS.o
- • Generic.ux
- • Generic.vh
Changes for v12.1.0.1328 - v12.1.0.1336
- Enhanced Detections:
- • Generic.uw
- • Generic.ux
- • Ransom-O
Changes for v12.1.0.1323 - v12.1.0.1328
- Enhanced Detections:
- • Exploit-CVE2014-0515
- • Exploit-SWF.i
- • Generic.ux
- • Generic.vh
- • PWS-ZBot.gen.aux
Changes for v12.1.0.1322 - v12.1.0.1323
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • Exploit-CVE2014-1761
- • Generic.ux
- • Generic.vh
- • Generic.vj
- • PWS-Zbot.gen.anj
Changes for v12.1.0.1320 - v12.1.0.1322
- New Detections:
- • Generic.vj
- • PWS-FCAD
- • PWS-Remora
- Enhanced Detections:
- • Exploit-SWF.g
- • Exploit-SWF.h
- • Generic Downloader.z
- • Generic.ux
- • Generic.vh
- • Generic.vj
Changes for v12.1.0.1316 - v12.1.0.1320
- New Detections:
- • Exploit-CVE2015-0313
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • Exploit-SWF.h
- • Exploit-Shellcode.gen
- • Generic Exploit.g
- • Generic.sq
- • Generic.vf
- • TDSS.d
Changes for v12.1.0.1315 - v12.1.0.1316
Changes for v12.1.0.1314 - v12.1.0.1315
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • Generic.ux
- • Generic.vi
Changes for v12.1.0.1307 - v12.1.0.1314
- New Detections:
- • Exploit-SWF.h
- • Exploit-Shellcode.gen
- Enhanced Detections:
- • Generic.ux
- • Generic.vi
Changes for v12.1.0.1303 - v12.1.0.1307
- New Detections:
- • Adware-AddLyrics
- • Adware-BProtect
- • Adware-BSurf
- • Adware-BetterInstaller
- • Adware-BetterSurf
- • Adware-Bprotect
- • Adware-Bprotect.a
- • Adware-Bprotect.b
- • Adware-Bprotect.c
- • Adware-DomaIQ
- • Adware-Eorezo
- • Adware-Hebogo
- • Adware-Iffinity
- • Adware-InstallQ
- • Adware-MegaSearch
- • Adware-MixiDJToolbar
- • Adware-Monetizer
- • Adware-NewNext
- • Adware-OutBrowse
- • Adware-PowerOffer
- • Adware-SaveShare
- • Adware-SweetIM
- • Adware-iBryte
- • Bat/Autorun.k
- • Bat/Autorun.worm.aabi
- • Bat/Autorun.worm.h
- • Bat/Autorun.worm.ni
- • Bat/Autorun.worm.zr
- • Bat/Autorun.worm.zr!vbs
- • Bat/Autorun.worm.zw
- • Bat/Mumu.worm
- • Bojan
- • BrainInstall
- • Cleanup
- • Crossrider
- • DirectDownminer
- • DistTrack!sys
- • Distromatic
- • DomaIQ
- • Downloader-BPJ.gen.a
- • Downloader-FKW
- • Downloader-FMA
- • Downloader-FMB
- • Downloader-FMJ
- • DriverPack
- • Encoded Executable
- • Exploit-DcomRpc
- • Exploit-DcomRpc.b
- • Exploit-DcomRpc.dll
- • Exploit-IFrame.gen.ah
- • Exploit-IFrame.gen.ak
- • Exploit-IFrame.gen.am
- • Exploit-Lsass
- • Exploit-Lsass.dll
- • Exploit-MS04-011
- • Exploit-MS04-011.gen
- • Exploit-PDF!Blacole.dx
- • Exploit-SWF!Blacole.dx
- • Exploit-XMLhttp.d
- • Exploit-XMLhttp.d.gen
- • Exploit-XMLhttp.d.gen.b
- • Exploit-XMLhttpd.d
- • Exploit-XMLhttpd.gen.c
- • FakeAlert.dx
- • FreeKey
- • GameEnix
- • GameVance.gen.be
- • GameVance.gen.bf
- • Generic Malware.af!ats
- • Generic Malware.ce!pec
- • Generic Malware.ev!pec
- • Generic.Dropped.a
- • Generic.Miuref.dx
- • Generic.Upatre.dx
- • Generic.dam
- • Generic.gl
- • Generic.it
- • Generic.iu
- • Generic.iv
- • Generic.iw
- • Generic.ix
- • Generic.iy
- • Generic.iz
- • Generic.ja
- • Generic.jb
- • Generic.jc
- • Generic.jd
- • Generic.je
- • Generic.jf
- • Generic.jg
- • Generic.jh
- • Generic.ji
- • Generic.jj
- • Generic.jk
- • Generic.jl
- • Generic.jm
- • Generic.jn
- • Generic.jo
- • Generic.jp
- • Generic.jq
- • Generic.jr
- • Generic.js
- • Generic.jt
- • Generic.ju
- • Generic.jv
- • Generic.jw
- • Generic.jx
- • Generic.jy
- • Generic.jz
- • Generic.ka
- • Generic.kb
- • Generic.kc
- • Generic.kd
- • Generic.ke
- • Generic.kf
- • Generic.kg
- • Generic.kh
- • Generic.ki
- • Generic.kj
- • Generic.kk
- • Generic.kl
- • Generic.km
- • Generic.kn
- • Generic.ko
- • Generic.kp
- • Generic.kq
- • Generic.kr
- • Generic.ks
- • Generic.kt
- • Generic.ku
- • Generic.kv
- • Generic.kw
- • Generic.kx
- • Generic.ky
- • Generic.kz
- • Generic.la
- • Generic.lb
- • Generic.lc
- • Generic.ld
- • Generic.le
- • Generic.lf
- • Generic.lg
- • Generic.lh
- • Generic.li
- • Generic.lm
- • Generic.ln
- • Generic.lo
- • Generic.lp
- • Generic.lq
- • Generic.lr
- • Generic.ls
- • Generic.lt
- • Generic.lu
- • Generic.lv
- • Generic.lw
- • Generic.lx
- • Generic.ly
- • Generic.lz
- • Generic.ma
- • Generic.mb
- • Generic.mc
- • Generic.md
- • Generic.me
- • Generic.mf
- • Generic.mg
- • Generic.mh
- • Generic.mi
- • Generic.mj
- • Generic.mk
- • Generic.ml
- • Generic.mm
- • Generic.mn
- • Generic.mo
- • Generic.mp
- • Generic.mq
- • Generic.mr
- • Generic.ms
- • Generic.mt
- • Generic.mu
- • Generic.mv
- • Generic.mw
- • Generic.mx
- • Generic.my
- • Generic.mz
- • Generic.na
- • Generic.nb
- • Generic.nc
- • Generic.nd
- • Generic.ne
- • Generic.nf
- • Generic.ng
- • Generic.nh
- • Generic.ni
- • Generic.nj
- • Generic.nk
- • Generic.nl
- • Generic.nm
- • Generic.nn
- • Generic.no
- • Generic.np
- • Generic.nq
- • Generic.nr
- • Generic.ns
- • Generic.nt
- • Generic.nu
- • Generic.nv
- • Generic.nw
- • Generic.nx
- • Generic.ny
- • Generic.nz
- • Generic.oa
- • Generic.ob
- • Generic.oc
- • Generic.od
- • Generic.oe
- • Generic.of
- • Generic.og
- • Generic.oh
- • Generic.oi
- • Generic.oj
- • Generic.ok
- • Generic.ol
- • Generic.om
- • Generic.on
- • Generic.oo
- • Generic.op
- • Generic.oq
- • Generic.or
- • Generic.os
- • Generic.ot
- • Generic.ou
- • Generic.ov
- • Generic.ow
- • Generic.ox
- • Generic.oy
- • Generic.oz
- • Generic.pa
- • Generic.pb
- • Generic.pc
- • Generic.pd
- • Generic.pe
- • Generic.pf
- • Generic.pg
- • Generic.ph
- • Generic.pi
- • Generic.pj
- • Generic.pk
- • Generic.pl
- • Generic.pm
- • Generic.pn
- • Generic.po
- • Generic.pp
- • Generic.pq
- • Generic.pr
- • Generic.ps
- • Generic.pt
- • Generic.pu
- • Generic.pw
- • Generic.px
- • Generic.py
- • Generic.pz
- • Generic.qa
- • Generic.qb
- • Generic.qc
- • Generic.qd
- • Generic.qe
- • Generic.qf
- • Generic.qg
- • Generic.qi
- • Generic.qj
- • Generic.qk
- • Generic.ql
- • Generic.qm
- • Generic.qn
- • Generic.qo
- • Generic.qp
- • Generic.qq
- • Generic.qr
- • Generic.qs
- • Generic.qt
- • Generic.qu
- • Generic.qv
- • Generic.qw
- • Generic.qx
- • Generic.qy
- • Generic.qz
- • Generic.ra
- • Generic.rb
- • Generic.rc
- • Generic.rd
- • Generic.re
- • Generic.rf
- • Generic.rg
- • Generic.rh
- • Generic.ri
- • Generic.rj
- • Generic.rk
- • Generic.rl
- • Generic.rm
- • Generic.rn
- • Generic.ro
- • Generic.rp
- • Generic.rq
- • Generic.rr
- • Generic.rs
- • Generic.rt
- • Generic.ru
- • Generic.rv
- • Generic.rw
- • Generic.rx
- • Generic.ry
- • Generic.rz
- • Generic.sa
- • Generic.sb
- • Generic.sc
- • Generic.sd
- • Generic.se
- • Generic.sg
- • Generic.sh
- • Generic.si
- • Generic.sj
- • Generic.sk
- • Generic.sl
- • Generic.sm
- • Generic.sn
- • Generic.so
- • Generic.sp
- • Generic.sq
- • Generic.sr
- • Generic.ss
- • Generic.st
- • Generic.su
- • Generic.sv
- • Generic.sw
- • Generic.sx
- • Generic.sy
- • Generic.sz
- • Generic.ta
- • Generic.tb
- • Generic.tc
- • Generic.td
- • Generic.te
- • Generic.tf
- • Generic.tg
- • Generic.th
- • Generic.ti
- • Generic.tj
- • Generic.tk
- • Generic.tl
- • Generic.tm
- • Generic.tn
- • Generic.to
- • Generic.tp
- • Generic.tq
- • Generic.tr
- • Generic.ts
- • Generic.tt
- • Generic.tu
- • Generic.tv
- • Generic.tw
- • Generic.tx
- • Generic.ty
- • Generic.tz
- • Generic.ua
- • Generic.ub
- • Generic.uc
- • Generic.ud
- • Generic.ue
- • Generic.uf
- • Generic.ug
- • Generic.uh
- • Generic.ui
- • Generic.uj
- • Generic.uk
- • Generic.ul
- • Generic.um
- • Generic.un
- • Generic.uo
- • Generic.up
- • Generic.uq
- • Generic.ur
- • Generic.us
- • Generic.ut
- • Generic.uu
- • Generic.uv
- • Generic.uw
- • Generic.ux
- • Generic.uy
- • Generic.uz
- • Generic.vb
- • Generic.vc
- • Generic.vd
- • Generic.ve
- • Generic.vf
- • Generic.vg
- • Generic.vh
- • HTA/Autorun.worm.gh
- • HTA/Autorun.worm.gh!lnk
- • HTool-JSP/WebShell
- • HTool-JSPRat
- • HTool-RemoteCmd
- • HackTool-ZBotBuilder
- • HideWindow
- • HideWindow.dll
- • IRCbot.gen.ah
- • InstallCore
- • InstallMonster
- • Installrex.dr
- • Ividi
- • Iwin
- • JS/Autorun.worm.aabn
- • JS/Autorun.worm.ci
- • JS/Blacole.dx
- • JS/Downloader-AUE
- • JS/Downloader-FCV
- • JS/IFrame.gen
- • JS/IFrame.gen.a
- • JS/IFrame.gen.h
- • JS/Iframe.gen
- • JS/PornPopup
- • JS/Redirector.ad
- • JS/Redirector.af
- • JS/Redirector.an
- • JS/Redirector.c
- • JS/Wonka
- • JV/Blacole.dx
- • Joke-ArchSMS.f
- • Katusha
- • Keylog-FAE
- • Keylog-SFY.dr
- • Linkun
- • Luckyleap
- • Maxiget
- • Mplug.gen.a
- • OSX/Baoba
- • PUP-FGB
- • PUP-FGC
- • PUP-FGE
- • PWCrack-PWDump
- • PWCrack-SQLRemote
- • PWS-Zbot.dx
- • PWS-Zbot.dx!rar
- • PWS-Zbot.dx!zip
- • Packsu
- • PowerPack
- • Ransom-FAC!lnk
- • Ransom-FAD
- • Ransom-FAE
- • Ransom-FAF
- • Ransom.dx
- • Somoto-BetterInstaller
- • Spyware-Nucleus
- • Spyware-RemoteSpy
- • Spyware-UltraKeyboard
- • Suspicious Keygen!rar
- • Tool-FaceHack
- • Tool-NetCat
- • Tool-ProcKill
- • Tool-VPassDecode
- • Toolbar-Browser
- • Toolbar-Inbox
- • Trojan-SkyHook
- • UltraDownload
- • Ultrarchive
- • Upatre.dx!zip
- • VBS/Autorun.bj
- • VBS/Autorun.worm!zip
- • VBS/Autorun.worm.aaay
- • VBS/Autorun.worm.aaaz
- • VBS/Autorun.worm.aaib
- • VBS/Autorun.worm.aaic
- • VBS/Autorun.worm.aau
- • VBS/Autorun.worm.aav
- • VBS/Autorun.worm.aaw
- • VBS/Autorun.worm.aax
- • VBS/Autorun.worm.au
- • VBS/Autorun.worm.ay
- • VBS/Autorun.worm.bdg
- • VBS/Autorun.worm.bfo
- • VBS/Autorun.worm.bgb
- • VBS/Autorun.worm.bgc
- • VBS/Autorun.worm.bi
- • VBS/Autorun.worm.bj
- • VBS/Autorun.worm.bs
- • VBS/Autorun.worm.by
- • VBS/Autorun.worm.ca
- • VBS/Autorun.worm.cy
- • VBS/Autorun.worm.dm
- • VBS/Autorun.worm.dn
- • VBS/Autorun.worm.dn!atr
- • VBS/Autorun.worm.dn!txt
- • VBS/Autorun.worm.dv
- • VBS/Autorun.worm.dz
- • VBS/Autorun.worm.en
- • VBS/Autorun.worm.ew
- • VBS/Autorun.worm.fu
- • VBS/Autorun.worm.fz
- • VBS/Autorun.worm.ga
- • VBS/Autorun.worm.gb
- • VBS/Autorun.worm.gc
- • VBS/Autorun.worm.gd
- • VBS/Autorun.worm.ge
- • VBS/Autorun.worm.gf
- • VBS/Autorun.worm.gg
- • VBS/Autorun.worm.k
- • VBS/Autorun.worm.k!bat
- • VBS/Autorun.worm.k!lnk
- • VBS/Autorun.worm.k!reg
- • VBS/Autorun.worm.ni
- • VBS/Autorun.worm.zd
- • VBS/Autorun.worm.ze
- • VBS/Autorun.worm.zl
- • VBS/Autorun.worm.zn
- • VBS/Autorun.worm.zo
- • VBS/Autorun.worm.zo!lnk
- • VBS/Autorun.worm.zs
- • VBS/Autorun.worm.zy
- • VBS/Autorun.worm.zz
- • VBS/IE-Title
- • W32/Anig.worm
- • W32/Anig.worm.dll
- • W32/Autorun
- • W32/Autorun.Worm.aaeh
- • W32/Autorun.Worm.aaeq
- • W32/Autorun.fo
- • W32/Autorun.worm
- • W32/Autorun.worm!inf
- • W32/Autorun.worm!ini
- • W32/Autorun.worm!vbd
- • W32/Autorun.worm.a
- • W32/Autorun.worm.aa
- • W32/Autorun.worm.aaa
- • W32/Autorun.worm.aaab
- • W32/Autorun.worm.aaac
- • W32/Autorun.worm.aaad
- • W32/Autorun.worm.aaae
- • W32/Autorun.worm.aaaf
- • W32/Autorun.worm.aaag
- • W32/Autorun.worm.aaah
- • W32/Autorun.worm.aaai
- • W32/Autorun.worm.aaai!lnk
- • W32/Autorun.worm.aaaj
- • W32/Autorun.worm.aaak
- • W32/Autorun.worm.aaal
- • W32/Autorun.worm.aaam
- • W32/Autorun.worm.aaan
- • W32/Autorun.worm.aaao
- • W32/Autorun.worm.aaap
- • W32/Autorun.worm.aaaq
- • W32/Autorun.worm.aaar
- • W32/Autorun.worm.aaas
- • W32/Autorun.worm.aaat
- • W32/Autorun.worm.aaau
- • W32/Autorun.worm.aaav
- • W32/Autorun.worm.aaaw
- • W32/Autorun.worm.aaaz
- • W32/Autorun.worm.aab
- • W32/Autorun.worm.aaba
- • W32/Autorun.worm.aabb
- • W32/Autorun.worm.aabc
- • W32/Autorun.worm.aabd
- • W32/Autorun.worm.aabe
- • W32/Autorun.worm.aabf
- • W32/Autorun.worm.aabg
- • W32/Autorun.worm.aabh
- • W32/Autorun.worm.aabi
- • W32/Autorun.worm.aabj
- • W32/Autorun.worm.aabk
- • W32/Autorun.worm.aabl
- • W32/Autorun.worm.aabl!inf
- • W32/Autorun.worm.aabl!lnk
- • W32/Autorun.worm.aabm
- • W32/Autorun.worm.aabm!bat
- • W32/Autorun.worm.aabm!reg
- • W32/Autorun.worm.aabo
- • W32/Autorun.worm.aabp
- • W32/Autorun.worm.aabq
- • W32/Autorun.worm.aabr
- • W32/Autorun.worm.aabs
- • W32/Autorun.worm.aabt
- • W32/Autorun.worm.aabu
- • W32/Autorun.worm.aabv
- • W32/Autorun.worm.aabw
- • W32/Autorun.worm.aaby
- • W32/Autorun.worm.aabz
- • W32/Autorun.worm.aac
- • W32/Autorun.worm.aaca
- • W32/Autorun.worm.aacb
- • W32/Autorun.worm.aacc
- • W32/Autorun.worm.aacd
- • W32/Autorun.worm.aace
- • W32/Autorun.worm.aacf
- • W32/Autorun.worm.aacg
- • W32/Autorun.worm.aach
- • W32/Autorun.worm.aaci
- • W32/Autorun.worm.aacj
- • W32/Autorun.worm.aack
- • W32/Autorun.worm.aacl
- • W32/Autorun.worm.aacm
- • W32/Autorun.worm.aacn
- • W32/Autorun.worm.aaco
- • W32/Autorun.worm.aacq
- • W32/Autorun.worm.aacr
- • W32/Autorun.worm.aacs
- • W32/Autorun.worm.aacz
- • W32/Autorun.worm.aad
- • W32/Autorun.worm.aae
- • W32/Autorun.worm.aaeb
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.aaem
- • W32/Autorun.worm.aaen
- • W32/Autorun.worm.aaeo
- • W32/Autorun.worm.aaep
- • W32/Autorun.worm.aaer
- • W32/Autorun.worm.aaet
- • W32/Autorun.worm.aaet!lnk
- • W32/Autorun.worm.aaf
- • W32/Autorun.worm.aag
- • W32/Autorun.worm.aah
- • W32/Autorun.worm.aai
- • W32/Autorun.worm.aaj
- • W32/Autorun.worm.aaj!inf
- • W32/Autorun.worm.aak
- • W32/Autorun.worm.aal
- • W32/Autorun.worm.aam
- • W32/Autorun.worm.aan
- • W32/Autorun.worm.aao
- • W32/Autorun.worm.aap
- • W32/Autorun.worm.aaq
- • W32/Autorun.worm.aar
- • W32/Autorun.worm.aas
- • W32/Autorun.worm.aat
- • W32/Autorun.worm.aau
- • W32/Autorun.worm.aau!env
- • W32/Autorun.worm.aaw
- • W32/Autorun.worm.aax
- • W32/Autorun.worm.aay
- • W32/Autorun.worm.aaz
- • W32/Autorun.worm.ab
- • W32/Autorun.worm.aba
- • W32/Autorun.worm.abb
- • W32/Autorun.worm.ac
- • W32/Autorun.worm.ad
- • W32/Autorun.worm.ae
- • W32/Autorun.worm.af
- • W32/Autorun.worm.ag
- • W32/Autorun.worm.ai
- • W32/Autorun.worm.aj
- • W32/Autorun.worm.ak
- • W32/Autorun.worm.al
- • W32/Autorun.worm.am
- • W32/Autorun.worm.an
- • W32/Autorun.worm.ao
- • W32/Autorun.worm.ap
- • W32/Autorun.worm.aq
- • W32/Autorun.worm.ar
- • W32/Autorun.worm.as
- • W32/Autorun.worm.at
- • W32/Autorun.worm.av
- • W32/Autorun.worm.aw
- • W32/Autorun.worm.ax
- • W32/Autorun.worm.az
- • W32/Autorun.worm.b
- • W32/Autorun.worm.b.cfg
- • W32/Autorun.worm.ba
- • W32/Autorun.worm.bb
- • W32/Autorun.worm.bba
- • W32/Autorun.worm.bbb
- • W32/Autorun.worm.bbc
- • W32/Autorun.worm.bbd
- • W32/Autorun.worm.bbe
- • W32/Autorun.worm.bbf
- • W32/Autorun.worm.bbg
- • W32/Autorun.worm.bbh
- • W32/Autorun.worm.bbh!bat
- • W32/Autorun.worm.bbh!job
- • W32/Autorun.worm.bbi
- • W32/Autorun.worm.bbj
- • W32/Autorun.worm.bbk
- • W32/Autorun.worm.bbl
- • W32/Autorun.worm.bbm
- • W32/Autorun.worm.bbn
- • W32/Autorun.worm.bbo
- • W32/Autorun.worm.bbp
- • W32/Autorun.worm.bbq
- • W32/Autorun.worm.bbr
- • W32/Autorun.worm.bbs
- • W32/Autorun.worm.bbt
- • W32/Autorun.worm.bbu
- • W32/Autorun.worm.bbv
- • W32/Autorun.worm.bbw
- • W32/Autorun.worm.bbx
- • W32/Autorun.worm.bby
- • W32/Autorun.worm.bbz
- • W32/Autorun.worm.bc
- • W32/Autorun.worm.bca
- • W32/Autorun.worm.bcb
- • W32/Autorun.worm.bcc
- • W32/Autorun.worm.bcd
- • W32/Autorun.worm.bce
- • W32/Autorun.worm.bcf
- • W32/Autorun.worm.bcg
- • W32/Autorun.worm.bch
- • W32/Autorun.worm.bci
- • W32/Autorun.worm.bcj
- • W32/Autorun.worm.bck
- • W32/Autorun.worm.bcl
- • W32/Autorun.worm.bcm
- • W32/Autorun.worm.bcn
- • W32/Autorun.worm.bco
- • W32/Autorun.worm.bcp
- • W32/Autorun.worm.bcq
- • W32/Autorun.worm.bcr
- • W32/Autorun.worm.bcs
- • W32/Autorun.worm.bct!inf
- • W32/Autorun.worm.bcu!inf
- • W32/Autorun.worm.bcv
- • W32/Autorun.worm.bcw
- • W32/Autorun.worm.bcx
- • W32/Autorun.worm.bcy
- • W32/Autorun.worm.bcz
- • W32/Autorun.worm.bd
- • W32/Autorun.worm.bda
- • W32/Autorun.worm.bdb
- • W32/Autorun.worm.bdc!vbs
- • W32/Autorun.worm.bdd
- • W32/Autorun.worm.bde
- • W32/Autorun.worm.bdf
- • W32/Autorun.worm.bdh!atr
- • W32/Autorun.worm.bdi
- • W32/Autorun.worm.bdj
- • W32/Autorun.worm.bdk
- • W32/Autorun.worm.bdl
- • W32/Autorun.worm.bdm!atr
- • W32/Autorun.worm.bdn
- • W32/Autorun.worm.bdo
- • W32/Autorun.worm.bdp
- • W32/Autorun.worm.bdq
- • W32/Autorun.worm.bdq!atr
- • W32/Autorun.worm.bdq!au3
- • W32/Autorun.worm.bdr
- • W32/Autorun.worm.bds
- • W32/Autorun.worm.bdt
- • W32/Autorun.worm.bdu
- • W32/Autorun.worm.bdv
- • W32/Autorun.worm.bdw
- • W32/Autorun.worm.bdx
- • W32/Autorun.worm.bdy
- • W32/Autorun.worm.bdz
- • W32/Autorun.worm.be
- • W32/Autorun.worm.bea
- • W32/Autorun.worm.beb
- • W32/Autorun.worm.bec
- • W32/Autorun.worm.bed
- • W32/Autorun.worm.bee
- • W32/Autorun.worm.bef
- • W32/Autorun.worm.beg
- • W32/Autorun.worm.beh
- • W32/Autorun.worm.bei
- • W32/Autorun.worm.bej
- • W32/Autorun.worm.bek
- • W32/Autorun.worm.bel
- • W32/Autorun.worm.bem
- • W32/Autorun.worm.ben
- • W32/Autorun.worm.beo
- • W32/Autorun.worm.bep
- • W32/Autorun.worm.bep!bat
- • W32/Autorun.worm.beq
- • W32/Autorun.worm.ber
- • W32/Autorun.worm.bes
- • W32/Autorun.worm.bet
- • W32/Autorun.worm.beu
- • W32/Autorun.worm.bev
- • W32/Autorun.worm.bew
- • W32/Autorun.worm.bex
- • W32/Autorun.worm.bey
- • W32/Autorun.worm.bez!atr
- • W32/Autorun.worm.bf
- • W32/Autorun.worm.bfa
- • W32/Autorun.worm.bfb
- • W32/Autorun.worm.bfc
- • W32/Autorun.worm.bfd
- • W32/Autorun.worm.bfe
- • W32/Autorun.worm.bff
- • W32/Autorun.worm.bfg
- • W32/Autorun.worm.bfh
- • W32/Autorun.worm.bfi
- • W32/Autorun.worm.bfj
- • W32/Autorun.worm.bfk
- • W32/Autorun.worm.bfl
- • W32/Autorun.worm.bfm
- • W32/Autorun.worm.bfn
- • W32/Autorun.worm.bfp
- • W32/Autorun.worm.bfq
- • W32/Autorun.worm.bfr
- • W32/Autorun.worm.bfs
- • W32/Autorun.worm.bft
- • W32/Autorun.worm.bfu
- • W32/Autorun.worm.bfv
- • W32/Autorun.worm.bfw
- • W32/Autorun.worm.bfx
- • W32/Autorun.worm.bfy
- • W32/Autorun.worm.bfz
- • W32/Autorun.worm.bg
- • W32/Autorun.worm.bga
- • W32/Autorun.worm.bgc
- • W32/Autorun.worm.bgd
- • W32/Autorun.worm.bge
- • W32/Autorun.worm.bgf
- • W32/Autorun.worm.bgg
- • W32/Autorun.worm.bgh
- • W32/Autorun.worm.bgi
- • W32/Autorun.worm.bgj
- • W32/Autorun.worm.bgk
- • W32/Autorun.worm.bgl
- • W32/Autorun.worm.bh
- • W32/Autorun.worm.bk
- • W32/Autorun.worm.bl
- • W32/Autorun.worm.bm
- • W32/Autorun.worm.bn
- • W32/Autorun.worm.bo
- • W32/Autorun.worm.bp
- • W32/Autorun.worm.bp!reg
- • W32/Autorun.worm.bq
- • W32/Autorun.worm.br
- • W32/Autorun.worm.bt
- • W32/Autorun.worm.bw
- • W32/Autorun.worm.bx
- • W32/Autorun.worm.bx!atr
- • W32/Autorun.worm.bx!inf
- • W32/Autorun.worm.bx.gen
- • W32/Autorun.worm.by
- • W32/Autorun.worm.by!env
- • W32/Autorun.worm.bz
- • W32/Autorun.worm.c
- • W32/Autorun.worm.c!lnk
- • W32/Autorun.worm.cb
- • W32/Autorun.worm.cb.dr
- • W32/Autorun.worm.cc
- • W32/Autorun.worm.cd
- • W32/Autorun.worm.ce
- • W32/Autorun.worm.cf
- • W32/Autorun.worm.cg
- • W32/Autorun.worm.ch
- • W32/Autorun.worm.cj
- • W32/Autorun.worm.ck
- • W32/Autorun.worm.cm
- • W32/Autorun.worm.cn
- • W32/Autorun.worm.co
- • W32/Autorun.worm.cp
- • W32/Autorun.worm.cp!bat
- • W32/Autorun.worm.cq
- • W32/Autorun.worm.cr
- • W32/Autorun.worm.cs
- • W32/Autorun.worm.cs!ini
- • W32/Autorun.worm.ct
- • W32/Autorun.worm.cu
- • W32/Autorun.worm.cv
- • W32/Autorun.worm.cw
- • W32/Autorun.worm.cx
- • W32/Autorun.worm.cz
- • W32/Autorun.worm.d
- • W32/Autorun.worm.da
- • W32/Autorun.worm.db
- • W32/Autorun.worm.dc
- • W32/Autorun.worm.dd
- • W32/Autorun.worm.dd!inf
- • W32/Autorun.worm.de
- • W32/Autorun.worm.df
- • W32/Autorun.worm.dg
- • W32/Autorun.worm.dh
- • W32/Autorun.worm.di
- • W32/Autorun.worm.dj
- • W32/Autorun.worm.dk
- • W32/Autorun.worm.dl
- • W32/Autorun.worm.dn
- • W32/Autorun.worm.do
- • W32/Autorun.worm.dp
- • W32/Autorun.worm.dp!lnk
- • W32/Autorun.worm.dq
- • W32/Autorun.worm.ds
- • W32/Autorun.worm.dt
- • W32/Autorun.worm.du
- • W32/Autorun.worm.dw
- • W32/Autorun.worm.dx
- • W32/Autorun.worm.dy
- • W32/Autorun.worm.e
- • W32/Autorun.worm.ea
- • W32/Autorun.worm.eb
- • W32/Autorun.worm.ec
- • W32/Autorun.worm.ed
- • W32/Autorun.worm.ef
- • W32/Autorun.worm.eg
- • W32/Autorun.worm.ei
- • W32/Autorun.worm.ej
- • W32/Autorun.worm.ek
- • W32/Autorun.worm.el
- • W32/Autorun.worm.em
- • W32/Autorun.worm.eo
- • W32/Autorun.worm.ep
- • W32/Autorun.worm.eq
- • W32/Autorun.worm.er
- • W32/Autorun.worm.es
- • W32/Autorun.worm.et
- • W32/Autorun.worm.eu
- • W32/Autorun.worm.eu!bat
- • W32/Autorun.worm.eu!lnk
- • W32/Autorun.worm.ev
- • W32/Autorun.worm.ex
- • W32/Autorun.worm.ey
- • W32/Autorun.worm.ez
- • W32/Autorun.worm.f
- • W32/Autorun.worm.fa
- • W32/Autorun.worm.fb
- • W32/Autorun.worm.fc
- • W32/Autorun.worm.fc!bat
- • W32/Autorun.worm.fd
- • W32/Autorun.worm.fe
- • W32/Autorun.worm.ff
- • W32/Autorun.worm.fg
- • W32/Autorun.worm.fh
- • W32/Autorun.worm.fi
- • W32/Autorun.worm.fj
- • W32/Autorun.worm.fk
- • W32/Autorun.worm.fl
- • W32/Autorun.worm.fm
- • W32/Autorun.worm.fn
- • W32/Autorun.worm.fp
- • W32/Autorun.worm.fq
- • W32/Autorun.worm.fr
- • W32/Autorun.worm.fs
- • W32/Autorun.worm.ft
- • W32/Autorun.worm.fu
- • W32/Autorun.worm.fv
- • W32/Autorun.worm.fw
- • W32/Autorun.worm.fx
- • W32/Autorun.worm.fy
- • W32/Autorun.worm.fz
- • W32/Autorun.worm.g
- • W32/Autorun.worm.ga
- • W32/Autorun.worm.gb
- • W32/Autorun.worm.gc
- • W32/Autorun.worm.gd
- • W32/Autorun.worm.ge
- • W32/Autorun.worm.gen!job
- • W32/Autorun.worm.gen.cl
- • W32/Autorun.worm.gen.za
- • W32/Autorun.worm.gen.zb
- • W32/Autorun.worm.gf
- • W32/Autorun.worm.gg
- • W32/Autorun.worm.gi
- • W32/Autorun.worm.gj
- • W32/Autorun.worm.gk
- • W32/Autorun.worm.gl
- • W32/Autorun.worm.gm
- • W32/Autorun.worm.gn
- • W32/Autorun.worm.go
- • W32/Autorun.worm.gp
- • W32/Autorun.worm.gq
- • W32/Autorun.worm.gr
- • W32/Autorun.worm.gs
- • W32/Autorun.worm.gt
- • W32/Autorun.worm.gu
- • W32/Autorun.worm.gv
- • W32/Autorun.worm.gw
- • W32/Autorun.worm.gx
- • W32/Autorun.worm.gy
- • W32/Autorun.worm.h
- • W32/Autorun.worm.h!env
- • W32/Autorun.worm.h!lnk
- • W32/Autorun.worm.hm
- • W32/Autorun.worm.i
- • W32/Autorun.worm.j
- • W32/Autorun.worm.k
- • W32/Autorun.worm.l
- • W32/Autorun.worm.m
- • W32/Autorun.worm.n
- • W32/Autorun.worm.o
- • W32/Autorun.worm.p
- • W32/Autorun.worm.q
- • W32/Autorun.worm.r
- • W32/Autorun.worm.remmants
- • W32/Autorun.worm.s
- • W32/Autorun.worm.t
- • W32/Autorun.worm.u
- • W32/Autorun.worm.v
- • W32/Autorun.worm.v!bat
- • W32/Autorun.worm.w
- • W32/Autorun.worm.x
- • W32/Autorun.worm.y
- • W32/Autorun.worm.z
- • W32/Autorun.worm.zc
- • W32/Autorun.worm.zf
- • W32/Autorun.worm.zf.gen
- • W32/Autorun.worm.zg
- • W32/Autorun.worm.zi
- • W32/Autorun.worm.zj
- • W32/Autorun.worm.zk
- • W32/Autorun.worm.zm
- • W32/Autorun.worm.zp
- • W32/Autorun.worm.zq
- • W32/Autorun.worm.zs
- • W32/Autorun.worm.zt
- • W32/Autorun.worm.zu
- • W32/Autorun.worm.zu.dr
- • W32/Autorun.worm.zv
- • W32/Autorun.worm.zw
- • W32/Autorun.worm.zw!inf
- • W32/Autorun.worm.zx
- • W32/Autorun.worm.zz
- • W32/Autorun.worm.zza
- • W32/Autorun.worm.zzb
- • W32/Autorun.worm.zzc
- • W32/Autorun.worm.zzd
- • W32/Autorun.worm.zze
- • W32/Autorun.worm.zze!bat
- • W32/Autorun.worm.zze.dr
- • W32/Autorun.worm.zzf
- • W32/Autorun.worm.zzg
- • W32/Autorun.worm.zzh
- • W32/Autorun.worm.zzi
- • W32/Autorun.worm.zzj
- • W32/Autorun.worm.zzk
- • W32/Autorun.worm.zzl
- • W32/Autorun.worm.zzm
- • W32/Autorun.worm.zzn
- • W32/Autorun.worm.zzo
- • W32/Autorun.worm.zzp
- • W32/Autorun.worm.zzq
- • W32/Autorun.worm.zzr
- • W32/Autorun.worm.zzs
- • W32/Autorun.worm.zzt
- • W32/Autorun.worm.zzu
- • W32/Autorun.worm.zzv
- • W32/Autorun.worm.zzw
- • W32/Autorun.worm.zzx
- • W32/Autorun.worm.zzz
- • W32/Bagle
- • W32/Bagle!eml.gen
- • W32/Bagle!pwdzip
- • W32/Bagle.ad!src
- • W32/Bagle.dldr
- • W32/Bagle.dll.dr
- • W32/Bagle.eml
- • W32/Bagle.fb!pwdzip
- • W32/Bagle.fc!pwdzip
- • W32/Bagle.fd!pwdzip
- • W32/Bagle.fe!pwdzip
- • W32/Bagle.fm.dldr
- • W32/Bagle.gen
- • W32/Bagle.gen@MM
- • W32/Bagle@MM!cpl
- • W32/Blaster.worm
- • W32/Blaster.worm.k
- • W32/Bropia.worm
- • W32/Bugbear
- • W32/Bugbear.a.dam
- • W32/Bugbear.b!data
- • W32/Bugbear.b.dam
- • W32/Bugbear.gen@MM
- • W32/Bugbear.h@MM
- • W32/Bugbear@MM
- • W32/Conficker.sys
- • W32/Conficker.worm
- • W32/Conficker.worm!inf
- • W32/Conficker.worm!job
- • W32/Conficker.worm.dr
- • W32/Conficker.worm.gen.a
- • W32/Conficker.worm.gen.b
- • W32/Conficker.worm.gen.c
- • W32/Conficker.worm.gen.d
- • W32/Conficker.worm.gen.e
- • W32/Deborm.worm.ah
- • W32/Deborm.worm.gen
- • W32/Doomjuice.worm
- • W32/Dumaru
- • W32/Dumaru.ad@MM
- • W32/Dumaru.al.dll
- • W32/Dumaru.dll
- • W32/Dumaru.eml
- • W32/Dumaru.gen
- • W32/Dumaru.gen@MM
- • W32/Dumaru.w.gen
- • W32/Elkern.cav
- • W32/Elkern.cav.c
- • W32/Elkern.cav.c.dam
- • W32/Expiro.gen.o
- • W32/Expiro.gen.p
- • W32/Expiro.gen.r
- • W32/Expiro.gen.ra
- • W32/Fizzer
- • W32/Fizzer.dll
- • W32/Fujacks!htm
- • W32/FunLove
- • W32/FunLove.apd
- • W32/FunLove.dam
- • W32/Gaobot.worm
- • W32/Generic.worm!irc
- • W32/Generic.worm.aa
- • W32/Generic.worm.ab
- • W32/Generic.worm.ac
- • W32/Generic.worm.ad
- • W32/Generic.worm.ae
- • W32/Generic.worm.af
- • W32/Generic.worm.ag
- • W32/Generic.worm.h
- • W32/Generic.worm.i
- • W32/Generic.worm.j
- • W32/Generic.x
- • W32/Generic.y
- • W32/Generic.z
- • W32/Harwig.worm
- • W32/IRCBot
- • W32/IRCBot.worm
- • W32/IRCBot.worm.gen.ai
- • W32/IRCbot.gen.aa
- • W32/IRCbot.gen.ab
- • W32/IRCbot.gen.ac
- • W32/IRCbot.gen.ad
- • W32/IRCbot.gen.ae
- • W32/IRCbot.gen.af
- • W32/IRCbot.gen.ai
- • W32/IRCbot.gen.aj
- • W32/IRCbot.worm
- • W32/IRCbot.worm.dll
- • W32/IRCbot.worm.gen.aj
- • W32/IRCbot.worm.gen.al
- • W32/IRCbot.worm.gen.am
- • W32/IRCbot.worm.gen.an
- • W32/Katusha
- • W32/Klez
- • W32/Klez.dam
- • W32/Klez.eml
- • W32/Klez.gen.b@MM
- • W32/Klez.rar
- • W32/Koobface.worm
- • W32/Koobface.worm!env
- • W32/Koobface.worm!env.b
- • W32/Koobface.worm!env.c
- • W32/Koobface.worm!env.d
- • W32/Koobface.worm.as
- • W32/Koobface.worm.dl
- • W32/Koobface.worm.gen
- • W32/Koobface.worm.gen!dll
- • W32/Koobface.worm.gen.aa
- • W32/Koobface.worm.gen.ab
- • W32/Koobface.worm.gen.ac
- • W32/Koobface.worm.gen.ad
- • W32/Koobface.worm.gen.ae
- • W32/Koobface.worm.gen.af
- • W32/Koobface.worm.gen.ag
- • W32/Koobface.worm.gen.ah
- • W32/Koobface.worm.gen.ai
- • W32/Koobface.worm.gen.aj
- • W32/Koobface.worm.gen.ak
- • W32/Koobface.worm.gen.al
- • W32/Koobface.worm.gen.am
- • W32/Koobface.worm.gen.an
- • W32/Koobface.worm.gen.ao
- • W32/Koobface.worm.gen.ap
- • W32/Koobface.worm.gen.aq
- • W32/Koobface.worm.gen.at
- • W32/Koobface.worm.gen.au
- • W32/Koobface.worm.gen.av
- • W32/Koobface.worm.gen.aw
- • W32/Koobface.worm.gen.aw!dll
- • W32/Koobface.worm.gen.aw!sys
- • W32/Koobface.worm.gen.ax!dll
- • W32/Koobface.worm.gen.ax!sys
- • W32/Koobface.worm.gen.ay!sys
- • W32/Koobface.worm.gen.az!dll
- • W32/Koobface.worm.gen.az!sys
- • W32/Koobface.worm.gen.b
- • W32/Koobface.worm.gen.ba
- • W32/Koobface.worm.gen.bb!sys
- • W32/Koobface.worm.gen.bc
- • W32/Koobface.worm.gen.bd
- • W32/Koobface.worm.gen.be
- • W32/Koobface.worm.gen.be.dr
- • W32/Koobface.worm.gen.bf
- • W32/Koobface.worm.gen.bg
- • W32/Koobface.worm.gen.bh
- • W32/Koobface.worm.gen.bi
- • W32/Koobface.worm.gen.bj
- • W32/Koobface.worm.gen.bk
- • W32/Koobface.worm.gen.bl
- • W32/Koobface.worm.gen.c
- • W32/Koobface.worm.gen.d
- • W32/Koobface.worm.gen.e
- • W32/Koobface.worm.gen.f
- • W32/Koobface.worm.gen.g
- • W32/Koobface.worm.gen.h
- • W32/Koobface.worm.gen.i
- • W32/Koobface.worm.gen.j
- • W32/Koobface.worm.gen.k
- • W32/Koobface.worm.gen.l
- • W32/Koobface.worm.gen.m
- • W32/Koobface.worm.gen.n
- • W32/Koobface.worm.gen.o
- • W32/Koobface.worm.gen.p
- • W32/Koobface.worm.gen.q
- • W32/Koobface.worm.gen.r
- • W32/Koobface.worm.gen.s
- • W32/Koobface.worm.gen.t
- • W32/Koobface.worm.gen.u
- • W32/Koobface.worm.gen.v
- • W32/Koobface.worm.gen.w
- • W32/Koobface.worm.gen.x
- • W32/Koobface.worm.gen.y
- • W32/Koobface.worm.gen.z
- • W32/Koobface.worm.gen.z2
- • W32/Korgo.worm
- • W32/Korgo.worm.ak
- • W32/Lirva
- • W32/Lirva.c.htm
- • W32/Lirva.eml
- • W32/Lirva.gen@MM
- • W32/Lirva.htm
- • W32/Lirva.txt
- • W32/Lovgate
- • W32/Lovgate.dam
- • W32/Mimail
- • W32/Mimail.c@MM
- • W32/Mimail.i!data
- • W32/MoFei.worm
- • W32/MoFei.worm.dr
- • W32/Morto
- • W32/Morto!dat
- • W32/Morto.a
- • W32/Morto.dll
- • W32/Morto.dll.a
- • W32/Morto.dll.b
- • W32/Morto.dll.c
- • W32/Morto.dll.d
- • W32/Morto.dll.e
- • W32/Mumu.b.worm
- • W32/MyWife
- • W32/MyWife.dll
- • W32/MyWife@MM
- • W32/Mydoom
- • W32/Mydoom!bat
- • W32/Mydoom!ftp
- • W32/Mydoom.b!hosts
- • W32/Mydoom.dam
- • W32/Mydoom.t.dll
- • W32/Mytob
- • W32/Mytob.gen@MM
- • W32/Mytob.worm
- • W32/Nachi!tftpd
- • W32/Nachi.worm
- • W32/Netsky
- • W32/Netsky.af@MM
- • W32/Nimda
- • W32/Nimda.dam
- • W32/Nimda.eml
- • W32/Nimda.gen@MM
- • W32/Nimda.htm
- • W32/Nuwar.dam
- • W32/Nuwar.gen.a@mm
- • W32/Nuwar.gen.b@mm
- • W32/Nuwar.sys
- • W32/Nuwar@MM
- • W32/Nuwar@MM!rar
- • W32/Nuwar@mm
- • W32/Pate
- • W32/Pate!dam
- • W32/Pate!remnants
- • W32/Pate.dam
- • W32/Pate.dr
- • W32/Pift
- • W32/Pift.dr
- • W32/Polip
- • W32/Polybot
- • W32/Polybot.bat
- • W32/Ramnit.e
- • W32/Rimecud
- • W32/Rimecud!env.a
- • W32/Rimecud!env.b
- • W32/Rimecud!env.c
- • W32/Rimecud!env.d
- • W32/Rimecud!env.e
- • W32/Rimecud!inf
- • W32/Rimecud.gen.aa
- • W32/Rimecud.gen.ac
- • W32/Rimecud.gen.ad
- • W32/Rimecud.gen.ae
- • W32/Rimecud.gen.af
- • W32/Rimecud.gen.ag
- • W32/Rimecud.gen.ah
- • W32/Rimecud.gen.ai
- • W32/Rimecud.gen.aj
- • W32/Rimecud.gen.ak
- • W32/Rimecud.gen.al
- • W32/Rimecud.gen.am
- • W32/Rimecud.gen.an
- • W32/Rimecud.gen.ao
- • W32/Rimecud.gen.ap
- • W32/Rimecud.gen.aq
- • W32/Rimecud.gen.ar
- • W32/Rimecud.gen.as
- • W32/Rimecud.gen.at
- • W32/Rimecud.gen.au
- • W32/Rimecud.gen.av
- • W32/Rimecud.gen.aw
- • W32/Rimecud.gen.ax
- • W32/Rimecud.gen.ay
- • W32/Rimecud.gen.ba
- • W32/Rimecud.gen.bb
- • W32/Rimecud.gen.bc
- • W32/Rimecud.gen.bd
- • W32/Rimecud.gen.be
- • W32/Rimecud.gen.bf
- • W32/Rimecud.gen.bg
- • W32/Rimecud.gen.bh
- • W32/Rimecud.gen.bi
- • W32/Rimecud.gen.bj
- • W32/Rimecud.gen.bk
- • W32/Rimecud.gen.bl
- • W32/Rimecud.gen.bm
- • W32/Rimecud.gen.bn
- • W32/Rimecud.gen.bo
- • W32/Rimecud.gen.bp
- • W32/Rimecud.gen.bq
- • W32/Rimecud.gen.br
- • W32/Rimecud.gen.bs
- • W32/Rimecud.gen.bt
- • W32/Rimecud.gen.bu
- • W32/Rimecud.gen.bv
- • W32/Rimecud.gen.bw
- • W32/Rimecud.gen.bx
- • W32/Rimecud.gen.by
- • W32/Rimecud.gen.bz
- • W32/Rimecud.gen.c
- • W32/Rimecud.gen.ca
- • W32/Rimecud.gen.cb
- • W32/Rimecud.gen.cc
- • W32/Rimecud.gen.cd
- • W32/Rimecud.gen.ce
- • W32/Rimecud.gen.cf
- • W32/Rimecud.gen.cg
- • W32/Rimecud.gen.ch
- • W32/Rimecud.gen.ci
- • W32/Rimecud.gen.cj
- • W32/Rimecud.gen.ck
- • W32/Rimecud.gen.cl
- • W32/Rimecud.gen.cm
- • W32/Rimecud.gen.cn
- • W32/Rimecud.gen.co
- • W32/Rimecud.gen.cp
- • W32/Rimecud.gen.cq
- • W32/Rimecud.gen.cr
- • W32/Rimecud.gen.cs
- • W32/Rimecud.gen.ct
- • W32/Rimecud.gen.cu
- • W32/Rimecud.gen.cv
- • W32/Rimecud.gen.cw
- • W32/Rimecud.gen.cx
- • W32/Rimecud.gen.cy
- • W32/Rimecud.gen.cz
- • W32/Rimecud.gen.d
- • W32/Rimecud.gen.da
- • W32/Rimecud.gen.db
- • W32/Rimecud.gen.dc
- • W32/Rimecud.gen.dd
- • W32/Rimecud.gen.de
- • W32/Rimecud.gen.df
- • W32/Rimecud.gen.dg
- • W32/Rimecud.gen.dh
- • W32/Rimecud.gen.di
- • W32/Rimecud.gen.dj
- • W32/Rimecud.gen.dk
- • W32/Rimecud.gen.dl
- • W32/Rimecud.gen.dm
- • W32/Rimecud.gen.dn
- • W32/Rimecud.gen.do
- • W32/Rimecud.gen.dp
- • W32/Rimecud.gen.dq
- • W32/Rimecud.gen.e
- • W32/Rimecud.gen.f
- • W32/Rimecud.gen.g
- • W32/Rimecud.gen.h
- • W32/Rimecud.gen.i
- • W32/Rimecud.gen.j
- • W32/Rimecud.gen.k
- • W32/Rimecud.gen.l
- • W32/Rimecud.gen.m
- • W32/Rimecud.gen.n
- • W32/Rimecud.gen.o
- • W32/Rimecud.gen.p
- • W32/Rimecud.gen.q
- • W32/Rimecud.gen.r
- • W32/Rimecud.gen.s
- • W32/Rimecud.gen.t
- • W32/Rimecud.gen.u
- • W32/Rimecud.gen.v
- • W32/Rimecud.gen.w
- • W32/Rimecud.gen.x
- • W32/Rimecud.gen.y
- • W32/Rimecud.gen.z
- • W32/Rimecud.worm.gen.bd
- • W32/Sality
- • W32/Sality.dr
- • W32/Sasser.worm
- • W32/Sasser.worm!ftp
- • W32/Sdbot
- • W32/Sdbot!irc
- • W32/Sdbot.bat
- • W32/Sdbot.cli
- • W32/Sdbot.dll
- • W32/Sdbot.dr
- • W32/Sdbot.worm
- • W32/Sdbot.worm!ftp
- • W32/Sdbot.worm.bat.b
- • W32/Sdbot.worm.dr
- • W32/Sdbot.worm.gen
- • W32/Sdbot.worm.gen.a
- • W32/Sdbot.worm.gen.b
- • W32/Sdbot.worm.gen.c
- • W32/Sdbot.worm.gen.d
- • W32/Sdbot.worm.gen.e
- • W32/Sdbot.worm.gen.q
- • W32/Sober
- • W32/Sober!data
- • W32/Sober.dam
- • W32/Sober.eml
- • W32/Sober.f.dam
- • W32/Sober.g.dam
- • W32/Sober.q!spam
- • W32/Sober.r.dr
- • W32/Sober.r@MM
- • W32/Sobig
- • W32/Sobig.dam
- • W32/Sobig.eml
- • W32/Sobig.f.dam
- • W32/Sobig.gen@MM
- • W32/Spybot.worm
- • W32/Spybot.worm.gen.t
- • W32/Swen
- • W32/Swen@MM
- • W32/VirRansom
- • W32/VirRansom.a
- • W32/Virut
- • W32/Virut!htm
- • W32/Virut!rtf
- • W32/Virut-cavity-elim
- • W32/Virut-elim
- • W32/Virut.gen
- • W32/Virut.gen.A
- • W32/Virut.j!dam
- • W32/Virut.n
- • W32/Virut.n!inf
- • W32/Virut.o
- • W32/Virut.rem
- • W32/Virut.rem.D
- • W32/Virut.rem.E
- • W32/Virut.rem.F
- • W32/Virut.rem.G
- • W32/Virut.rem.H
- • W32/Virut.rem.I
- • W32/Virut.rem.K
- • W32/Virut.rem.L
- • W32/Virut.rem.M
- • W32/Vulcanbot
- • W32/Winemmem
- • W32/XDoc
- • W32/XDocCrypt
- • W32/XDocCrypt!Susp
- • W32/XDocCrypt!rem
- • W32/XDocCrypt.a
- • W32/XDocCrypt.a!lnk
- • W32/XDocCrypt.a!rem
- • W32/XDocCrypt.a.dr
- • W32/XDocCrypt.b
- • W32/XDocCrypt.b.dr
- • W32/XDocCrypt.c
- • W32/XDocCrypt.d
- • W32/Xpaj.b
- • W32/Xpaj.c
- • W32/Xpaj.dr
- • W32/Xpaj.dr.a
- • W32/Xpaj.dr.b
- • W32/Yaha.eml
- • W32/Yaha.gen@MM
- • W32/Yaha.y@MM
- • W32/Yaha@MM
- • W32/Zafi
- • W32/Zafi.b.dam
- • W32/Zindos.worm
- • W32/Zotob.worm
- • W32/Zotob.worm!hosts
- • W64/Expiro
- • W64/Expiro.a
- • W64/Expiro.b
- • W64/Expiro.ba
- • W64/Expiro.bb
- • WebexpEnhanced
- • ransom.dx
- • with fishy extension
- • ~T-SUS-BT
- • ~T-SUS-BU
- • ~T-SUS-BV
- Enhanced Detections:
- • Adware-BetterSurf
- • Adware-Bprotect
- • Adware-DomaIQ
- • Adware-OutBrowse
- • Bat/Autorun.worm.aabi
- • Bat/Autorun.worm.ni
- • Bat/Autorun.worm.zw
- • Crossrider
- • Exploit-CVE2013-1493
- • Exploit-DcomRpc
- • Exploit-Lsass
- • Exploit-XMLhttp.d
- • Exploit-XMLhttp.d.gen
- • Exploit-XMLhttpd.d
- • FakeAlert.dx
- • Generic.dam
- • Generic.dx
- • Generic.oh
- • Generic.on
- • Generic.ow
- • Generic.rk
- • Generic.rs
- • Generic.rt
- • Generic.so
- • Generic.sp
- • Generic.sq
- • Generic.sr
- • Generic.st
- • Generic.su
- • Generic.sv
- • Generic.tz
- • Generic.ub
- • Generic.uc
- • Generic.ui
- • Generic.un
- • Generic.uo
- • Generic.uq
- • Generic.ur
- • Generic.ut
- • Generic.vf
- • HTA/Autorun.worm.gh!lnk
- • HTool-JSP/WebShell
- • HTool-JSPRat
- • HTool-RemoteCmd
- • HideWindow
- • JS/Autorun.worm.ci
- • JS/IFrame.gen
- • JS/Redirector
- • JV/Blacole.dx
- • PWCrack-PWDump
- • PWS-ZBot.gen.aux
- • PWS-Zbot
- • PWS-Zbot.dx
- • PWS-Zbot.dx!zip
- • Ransom.dx
- • SWF/Exploit-Shellcode
- • Trojan-SkyHook
- • Upatre.dx!zip
- • VBS/Autorun.worm.aaaz
- • VBS/Autorun.worm.aau
- • VBS/Autorun.worm.au
- • VBS/Autorun.worm.bi
- • VBS/Autorun.worm.gc
- • VBS/Autorun.worm.gg
- • VBS/Autorun.worm.k
- • VBS/Autorun.worm.k!bat
- • VBS/Autorun.worm.zz
- • VBS/IE-Title
- • W32/Autorun.Worm.aaeh
- • W32/Autorun.worm
- • W32/Autorun.worm!inf
- • W32/Autorun.worm.a
- • W32/Autorun.worm.aabl
- • W32/Autorun.worm.aabl!lnk
- • W32/Autorun.worm.aabp
- • W32/Autorun.worm.aacl
- • W32/Autorun.worm.aacz
- • W32/Autorun.worm.aad
- • W32/Autorun.worm.aaeb
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.aag
- • W32/Autorun.worm.aah
- • W32/Autorun.worm.aaj
- • W32/Autorun.worm.aaj!inf
- • W32/Autorun.worm.aak
- • W32/Autorun.worm.aal
- • W32/Autorun.worm.aao
- • W32/Autorun.worm.aap
- • W32/Autorun.worm.ac
- • W32/Autorun.worm.af
- • W32/Autorun.worm.ai
- • W32/Autorun.worm.av
- • W32/Autorun.worm.aw
- • W32/Autorun.worm.b
- • W32/Autorun.worm.bbc
- • W32/Autorun.worm.bbd
- • W32/Autorun.worm.bbe
- • W32/Autorun.worm.bbf
- • W32/Autorun.worm.bbh
- • W32/Autorun.worm.bbz
- • W32/Autorun.worm.bcl
- • W32/Autorun.worm.bcm
- • W32/Autorun.worm.bdk
- • W32/Autorun.worm.bdr
- • W32/Autorun.worm.beq
- • W32/Autorun.worm.bey
- • W32/Autorun.worm.bf
- • W32/Autorun.worm.bge
- • W32/Autorun.worm.bh
- • W32/Autorun.worm.bm
- • W32/Autorun.worm.bp
- • W32/Autorun.worm.bw
- • W32/Autorun.worm.bx
- • W32/Autorun.worm.by
- • W32/Autorun.worm.bz
- • W32/Autorun.worm.c
- • W32/Autorun.worm.cb
- • W32/Autorun.worm.ch
- • W32/Autorun.worm.cp
- • W32/Autorun.worm.cs
- • W32/Autorun.worm.ct
- • W32/Autorun.worm.df
- • W32/Autorun.worm.dq
- • W32/Autorun.worm.dt
- • W32/Autorun.worm.dx
- • W32/Autorun.worm.ec
- • W32/Autorun.worm.em
- • W32/Autorun.worm.er
- • W32/Autorun.worm.ev
- • W32/Autorun.worm.fc
- • W32/Autorun.worm.fc!bat
- • W32/Autorun.worm.ff
- • W32/Autorun.worm.fn
- • W32/Autorun.worm.fr
- • W32/Autorun.worm.fs
- • W32/Autorun.worm.ft
- • W32/Autorun.worm.fv
- • W32/Autorun.worm.fw
- • W32/Autorun.worm.fx
- • W32/Autorun.worm.fy
- • W32/Autorun.worm.g
- • W32/Autorun.worm.gen.za
- • W32/Autorun.worm.gen.zb
- • W32/Autorun.worm.gl
- • W32/Autorun.worm.gp
- • W32/Autorun.worm.gr
- • W32/Autorun.worm.gt
- • W32/Autorun.worm.gu
- • W32/Autorun.worm.gv
- • W32/Autorun.worm.h
- • W32/Autorun.worm.i
- • W32/Autorun.worm.k
- • W32/Autorun.worm.n
- • W32/Autorun.worm.p
- • W32/Autorun.worm.r
- • W32/Autorun.worm.x
- • W32/Autorun.worm.y
- • W32/Autorun.worm.zf
- • W32/Autorun.worm.zf.gen
- • W32/Autorun.worm.zp
- • W32/Autorun.worm.zu
- • W32/Autorun.worm.zv
- • W32/Autorun.worm.zx
- • W32/Autorun.worm.zz
- • W32/Autorun.worm.zze
- • W32/Autorun.worm.zzi
- • W32/Autorun.worm.zzj
- • W32/Autorun.worm.zzk
- • W32/Autorun.worm.zzn
- • W32/Autorun.worm.zzp
- • W32/Autorun.worm.zzs
- • W32/Autorun.worm.zzw
- • W32/Bagle
- • W32/Bagle!eml.gen
- • W32/Bagle.dldr
- • W32/Bagle.dll.dr
- • W32/Bagle.gen
- • W32/Bropia.worm
- • W32/Bugbear
- • W32/Conficker
- • W32/Conficker.sys
- • W32/Conficker.worm
- • W32/Conficker.worm!inf
- • W32/Conficker.worm.dr
- • W32/Conficker.worm.gen.b
- • W32/Conficker.worm.gen.d
- • W32/Dumaru
- • W32/Dumaru.dll
- • W32/Elkern.cav.c
- • W32/Elkern.cav.c.dam
- • W32/Fujacks!htm
- • W32/FunLove
- • W32/Gaobot.worm
- • W32/IRCBot
- • W32/IRCBot.worm
- • W32/IRCBot.worm.gen.ai
- • W32/IRCbot
- • W32/IRCbot.worm
- • W32/IRCbot.worm.dll
- • W32/IRCbot.worm.gen.aj
- • W32/Klez
- • W32/Koobface.worm
- • W32/Koobface.worm!env
- • W32/Koobface.worm.gen.aj
- • W32/Koobface.worm.gen.au
- • W32/Koobface.worm.gen.bg
- • W32/Koobface.worm.gen.d
- • W32/Koobface.worm.gen.f
- • W32/Koobface.worm.gen.g
- • W32/Koobface.worm.gen.h
- • W32/Koobface.worm.gen.n
- • W32/Koobface.worm.gen.r
- • W32/Koobface.worm.gen.s
- • W32/Koobface.worm.gen.z
- • W32/Koobface.worm.gen.z2
- • W32/Korgo.worm
- • W32/Lirva.eml
- • W32/Lovgate
- • W32/Mimail
- • W32/Morto
- • W32/MyWife
- • W32/Mydoom
- • W32/Mytob
- • W32/Mytob.gen@MM
- • W32/Netsky
- • W32/Nimda.htm
- • W32/Nuwar
- • W32/Nuwar.dam
- • W32/Nuwar.sys
- • W32/Nuwar@MM
- • W32/Nuwar@MM!rar
- • W32/Nuwar@mm
- • W32/Pate
- • W32/Rimecud
- • W32/Rimecud.gen.aj
- • W32/Rimecud.gen.ay
- • W32/Rimecud.gen.br
- • W32/Rimecud.gen.dl
- • W32/Rimecud.gen.e
- • W32/Sality
- • W32/Sality.dr
- • W32/Sasser.worm
- • W32/Sdbot
- • W32/Sdbot.dr
- • W32/Sdbot.worm
- • W32/Sdbot.worm.dr
- • W32/Sober
- • W32/Sobig
- • W32/Sobig.dam
- • W32/Sobig.f.dam
- • W32/Spybot.worm
- • W32/Virut
- • W32/Virut!htm
- • W32/Virut.n
- • W32/Virut.rem
- • W32/Vulcanbot
- • W32/Winemmem
- • W32/XDocCrypt.a
- • W32/XDocCrypt.a.dr
- • W32/Xpaj
- • W32/Xpaj.b
- • W32/Xpaj.c
- • W32/Zotob.worm
- • ZeroAccess
- • ransom.dx
Changes for v12.1.0.1299 - v12.1.0.1303
- Enhanced Detections:
- • JS/Exploit-Angler.a
Changes for v12.1.0.1298 - v12.1.0.1299
- New Detections:
- • Exploit-2013-1488
- • Exploit-CVE-2012-1875
- • Exploit-CVE-2012-1889
- • Exploit-CVE-2014-0558
- • Exploit-CVE-2014-4671
- • Exploit-CVE2008-2551
- • Exploit-CVE2010-0822
- • Exploit-CVE2010-2568!lnk
- • Exploit-CVE2010-3333
- • Exploit-CVE2010-3333.i
- • Exploit-CVE2010-3333.j
- • Exploit-CVE2010-3333.l
- • Exploit-CVE2010-3333.m
- • Exploit-CVE2012-0158!a
- • Exploit-CVE2012-0158.a
- • Exploit-CVE2012-0158.l!rtf
- • Exploit-CVE2012-0170
- • Exploit-CVE2012-0185
- • Exploit-CVE2012-0198
- • Exploit-CVE2012-0289
- • Exploit-CVE2012-0500
- • Exploit-CVE2012-0550
- • Exploit-CVE2012-1493
- • Exploit-CVE2012-1535
- • Exploit-CVE2012-1535!doc
- • Exploit-CVE2012-1538
- • Exploit-CVE2012-1723
- • Exploit-CVE2012-1723.a
- • Exploit-CVE2012-1723.b
- • Exploit-CVE2012-1723.c
- • Exploit-CVE2012-1723.d
- • Exploit-CVE2012-1723.f
- • Exploit-CVE2012-1723.g
- • Exploit-CVE2012-1723.gen.a
- • Exploit-CVE2012-1723.gen.b
- • Exploit-CVE2012-1723.h
- • Exploit-CVE2012-1723.i
- • Exploit-CVE2012-1723.j
- • Exploit-CVE2012-1723.l
- • Exploit-CVE2012-1723.m
- • Exploit-CVE2012-1856!rtf
- • Exploit-CVE2012-1875
- • Exploit-CVE2012-1876
- • Exploit-CVE2012-1889
- • Exploit-CVE2012-1891
- • Exploit-CVE2012-2049
- • Exploit-CVE2012-2050
- • Exploit-CVE2012-2516
- • Exploit-CVE2012-2539
- • Exploit-CVE2012-3748
- • Exploit-CVE2012-4681.a
- • Exploit-CVE2012-4786
- • Exploit-CVE2012-4792
- • Exploit-CVE2012-4969
- • Exploit-CVE2012-5076
- • Exploit-CVE2012-5088
- • Exploit-CVE2012-5271
- • Exploit-CVE2012-5672
- • Exploit-CVE2013-0074
- • Exploit-CVE2013-0422
- • Exploit-CVE2013-0422.a
- • Exploit-CVE2013-0431
- • Exploit-CVE2013-0431.a
- • Exploit-CVE2013-0633
- • Exploit-CVE2013-0634
- • Exploit-CVE2013-0640
- • Exploit-CVE2013-0753
- • Exploit-CVE2013-0809
- • Exploit-CVE2013-1298
- • Exploit-CVE2013-1347
- • Exploit-CVE2013-1488
- • Exploit-CVE2013-1489
- • Exploit-CVE2013-1491
- • Exploit-CVE2013-1493
- • Exploit-CVE2013-1493.a
- • Exploit-CVE2013-1690
- • Exploit-CVE2013-2420
- • Exploit-CVE2013-2423
- • Exploit-CVE2013-2423.a
- • Exploit-CVE2013-2460
- • Exploit-CVE2013-2463
- • Exploit-CVE2013-2465
- • Exploit-CVE2013-2465.a
- • Exploit-CVE2013-2470
- • Exploit-CVE2013-2471
- • Exploit-CVE2013-2473
- • Exploit-CVE2013-2551
- • Exploit-CVE2013-2729
- • Exploit-CVE2013-2912
- • Exploit-CVE2013-3111
- • Exploit-CVE2013-3120
- • Exploit-CVE2013-3121
- • Exploit-CVE2013-3163
- • Exploit-CVE2013-3184
- • Exploit-CVE2013-3845
- • Exploit-CVE2013-3893
- • Exploit-CVE2013-3893.b
- • Exploit-CVE2013-3893.c
- • Exploit-CVE2013-3893.d
- • Exploit-CVE2013-3897
- • Exploit-CVE2013-3906
- • Exploit-CVE2013-3914
- • Exploit-CVE2013-3918
- • Exploit-CVE2013-4798
- • Exploit-CVE2013-5049
- • Exploit-CVE2013-5329
- • Exploit-CVE2013-5331
- • Exploit-CVE2013-6877
- • Exploit-CVE2014-0282
- • Exploit-CVE2014-0287
- • Exploit-CVE2014-0289
- • Exploit-CVE2014-0290
- • Exploit-CVE2014-0304
- • Exploit-CVE2014-0307
- • Exploit-CVE2014-0309
- • Exploit-CVE2014-0322
- • Exploit-CVE2014-0324
- • Exploit-CVE2014-0497
- • Exploit-CVE2014-0502
- • Exploit-CVE2014-0511
- • Exploit-CVE2014-0515
- • Exploit-CVE2014-0556
- • Exploit-CVE2014-0569
- • Exploit-CVE2014-0779
- • Exploit-CVE2014-1753
- • Exploit-CVE2014-1761
- • Exploit-CVE2014-1761!rtf
- • Exploit-CVE2014-1762
- • Exploit-CVE2014-1772
- • Exploit-CVE2014-1776
- • Exploit-CVE2014-1785
- • Exploit-CVE2014-1795
- • Exploit-CVE2014-1805
- • Exploit-CVE2014-1815
- • Exploit-CVE2014-4057
- • Exploit-CVE2014-4088
- • Exploit-CVE2014-4089
- • Exploit-CVE2014-4092
- • Exploit-CVE2014-4094
- • Exploit-CVE2014-4114
- • Exploit-CVE2014-6373
- • Exploit-CVE2014-7247
- • Exploit-CVE2014-8440
- • Exploit-CVE2014-8967
- • Exploit-CodeBase.chm
- • Exploit-Downloader
- • Exploit-Goonkit!JNLP
- • Exploit-PDF!Blacole
- • Exploit-PDF!Blacole.d
- • Exploit-PDF!Blacole.e
- • Exploit-PDF!Blacole.f
- • Exploit-PDF!Blacole.g
- • Exploit-PDF!Blacole.h
- • Exploit-PDF!Blacole.i
- • Exploit-PDF!Blacole.j
- • Exploit-PDF!Blacole.k
- • Exploit-PDF!Blacole.l
- • Exploit-PDF!Blacole.m
- • Exploit-PDF!Blacole.n
- • Exploit-PDF!Blacole.o
- • Exploit-PDF!Blacole.p
- • Exploit-PDF!Blacole.q
- • Exploit-PDF!Blacole.r
- • Exploit-PDF!Blacole.s
- • Exploit-PDF!Blacole.t
- • Exploit-PDF.bo.gen
- • Exploit-PDF.sc.gen
- • Exploit-PDF.sd
- • Exploit-PowerShell
- • Exploit-Redokit.b
- • Exploit-Rekit.gen
- • Exploit-SWF.e
- • Exploit-crypto_CRMFRequest
- • Exploit-lnk
- • Exploit/ObfusJava
- • Generic Exploit
- • Generic Exploit.f
- • Generic Exploit.n
- • Generic Exploit.o
- • Generic.vg
- • GenericExploit.a
- • GenericExploit.b
- • GenericExploit.c
- • GenericExploit.d
- • JS/Blacole-Redirect.ai
- • JS/Downloader
- • JS/Downloader.gen.a
- • JS/Exploit
- • JS/Exploit!JNLP.d
- • JS/Exploit-Angler
- • JS/Exploit-Angler.a
- • JS/Exploit-Angler.b
- • JS/Exploit-Angler.c
- • JS/Exploit-Astrum
- • JS/Exploit-Blacole.lg
- • JS/Exploit-Blacole.lh
- • JS/Exploit-Blacole.li
- • JS/Exploit-Blacole.nb
- • JS/Exploit-Blacole.nc
- • JS/Exploit-Blacole.nd
- • JS/Exploit-Bleedlife.a
- • JS/Exploit-Bleedlife.b
- • JS/Exploit-CVE2013-2551
- • JS/Exploit-Cbosskit.a
- • JS/Exploit-Cool.b
- • JS/Exploit-Cool.c
- • JS/Exploit-Cool.d
- • JS/Exploit-Cool.e
- • JS/Exploit-Cotcas
- • JS/Exploit-Cotcas.a
- • JS/Exploit-Cpackit.a
- • JS/Exploit-Cpackit.b
- • JS/Exploit-Critkit.a
- • JS/Exploit-Critkit.b
- • JS/Exploit-Godakit.a
- • JS/Exploit-Godakit.gen
- • JS/Exploit-Goonkit.a
- • JS/Exploit-Hellokit
- • JS/Exploit-Himankit
- • JS/Exploit-Impackit.a
- • JS/Exploit-Impackit.b
- • JS/Exploit-Infinity
- • JS/Exploit-Jdb.a
- • JS/Exploit-Meadgive
- • JS/Exploit-Meadgive.a
- • JS/Exploit-Neukit.a
- • JS/Exploit-Nuckit!gen
- • JS/Exploit-Nuclear
- • JS/Exploit-Nuclearkit
- • JS/Exploit-Nuclearkit.a
- • JS/Exploit-Nuclearkit.b
- • JS/Exploit-Nuclearkit.c
- • JS/Exploit-Nuclearkit.d
- • JS/Exploit-Nuclearkit.e
- • JS/Exploit-PDF.a
- • JS/Exploit-Phoex
- • JS/Exploit-Phoex.a
- • JS/Exploit-Redokit.a
- • JS/Exploit-Rekit.e
- • JS/Exploit-Rigkit
- • JS/Exploit-Rigkit.a
- • JS/Exploit-Sakurakit.a
- • JS/Exploit-Sorangekit.a
- • JS/Exploit-Sorangekit.b
- • JS/Exploit-Sorangekit.c
- • JS/Exploit-Splkit.a
- • JS/Exploit-Stykit.a
- • JS/Exploit-Stykit.b
- • JS/Exploit-Stykit.c
- • JS/Exploit-Stykit.d
- • JS/Exploit-Stykit.e
- • JS/Exploit-Stykit.f
- • JS/Exploit-Stykit.g
- • JS/Exploit-Stykit.h
- • JS/Exploit-Stykit.i
- • JS/Exploit-Stykit.j
- • JS/Exploit-Stykit.k
- • JS/Exploit-Stykit.l
- • JS/Exploit.a
- • JS/Exploit.b
- • JS/Exploit.c
- • JS/Exploit.d
- • JS/FaceHack
- • JS/Faceliker.t
- • JS/Redirect-Angler.a
- • JS/Redirect-Cpackit.a
- • JS/Redirect-Critkit.a
- • JS/Redirect-Gzeronekit.a
- • JS/Redirect-Jdb.a
- • JS/SMSSend.c
- • Java/Adwind
- • OSX/Exploit.a
- • OSX/Exploit.b
- • OSX/GetShell.gen
- • Perl-ShellBot
- • SWF/Exploit-Angler
- • SWF/Exploit-CVE-2014-1776
- • SWF/Exploit-CVE2012-0779
- • SWF/Exploit-CVE2014-0322
- • SWF/Exploit-Shellcode
- • SWF/FakeScan
- • VBA/Downloader.gen
- • VBA/Downloader.gen.a
- • VBS/Power.worm.gen
- • X97M/Power.worm.gen
- • X97M/Powershell.gen
- • XDPWrapper
- Enhanced Detections:
- • Exploit-CVE2010-3333.j
- • Exploit-CVE2011-2462
- • Exploit-CVE2011-3544
- • Exploit-CVE2012-0158
- • Exploit-CVE2012-0158!rtf
- • Exploit-CVE2012-0507
- • Exploit-CVE2012-1535
- • Exploit-CVE2012-1723
- • Exploit-CVE2012-1723.g
- • Exploit-CVE2012-1723.h
- • Exploit-CVE2012-1723.i
- • Exploit-CVE2012-1723.j
- • Exploit-CVE2012-1723.l
- • Exploit-CVE2012-1889
- • Exploit-CVE2012-2539
- • Exploit-CVE2012-4681.a
- • Exploit-CVE2012-4792
- • Exploit-CVE2012-4969
- • Exploit-CVE2012-5076
- • Exploit-CVE2013-0074
- • Exploit-CVE2013-0422
- • Exploit-CVE2013-0422.a
- • Exploit-CVE2013-0431
- • Exploit-CVE2013-0634
- • Exploit-CVE2013-1347
- • Exploit-CVE2013-1493
- • Exploit-CVE2013-1493.a
- • Exploit-CVE2013-1690
- • Exploit-CVE2013-2423
- • Exploit-CVE2013-2423.a
- • Exploit-CVE2013-2460
- • Exploit-CVE2013-2465
- • Exploit-CVE2013-2465.a
- • Exploit-CVE2013-2471
- • Exploit-CVE2013-3163
- • Exploit-CVE2013-3897
- • Exploit-CVE2013-3918
- • Exploit-CVE2014-0287
- • Exploit-CVE2014-0307
- • Exploit-CVE2014-0322
- • Exploit-CVE2014-0502
- • Exploit-CVE2014-0515
- • Exploit-CVE2014-1761
- • Exploit-CVE2014-1761!rtf
- • Exploit-CVE2014-1776
- • Exploit-CVE2014-1795
- • Exploit-CVE2014-1815
- • Exploit-CVE2014-7247
- • Exploit-lnk
- • Generic Downloader.z
- • Generic Exploit
- • Generic Exploit.f
- • Generic.ux
- • Generic.vc
- • Generic.vf
- • GenericExploit.d
- • JS/Blacole-Redirector
- • JS/Exploit-Angler.a
- • JS/Exploit-Blacole.aj
- • JS/Exploit-Blacole.le
- • JS/Exploit-Blacole.lj
- • JS/Exploit-CVE2013-2551
- • JS/Exploit-Nuclearkit.d
- • JS/Exploit-Sorangekit.c
- • JS/Exploit.c
- • SWF/Exploit-Angler
- • SWF/Exploit-Shellcode
- • VBS/Power.worm.gen
- • X97M/Powershell.gen
Changes for v12.1.0.1297 - v12.1.0.1298
- Enhanced Detections:
- • Generic.ux
- • Generic.vf
- • W32/VirRansom
Changes for v12.1.0.1294 - v12.1.0.1297
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • Generic.ux
- • Generic.vf
Changes for v12.1.0.1293 - v12.1.0.1294
- Enhanced Detections:
- • Generic.ux
Changes for v12.1.0.1291 - v12.1.0.1293
- New Detections:
- • Generic.vf
- Enhanced Detections:
- • Crossrider
Changes for v12.1.0.1279 - v12.1.0.1291
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • Generic Downloader.gm
- • Generic.ux
- • Generic.vc
- • VBS/Autorun.worm.aaib
Changes for v12.1.0.1277 - v12.1.0.1279
- Enhanced Detections:
- • W32/Rimecud
Changes for v12.1.0.1273 - v12.1.0.1277
- Enhanced Detections:
- • Crossrider
Changes for v12.1.0.1271 - v12.1.0.1272
- Enhanced Detections:
- • Crossrider
- • Generic PWS.o
- • Generic.ux
- • VBS/Autorun.worm.aaic
- • W32/VirRansom
Changes for v12.1.0.1253 - v12.1.0.1267
- New Detections:
- • Generic.vd
- • Generic.ve
- • VBS/Autorun.worm.aaic
- Enhanced Detections:
- • Exploit-PDF.rt.gen
- • Generic PWS.o
- • Generic.ux
Changes for v12.1.0.1251 - v12.1.0.1253
- Enhanced Detections:
- • Generic.uw
- • Generic.ux
Changes for v12.1.0.1249 - v12.1.0.1251
- Enhanced Detections:
- • Generic.ux
Changes for v12.1.0.1245 - v12.1.0.1249
- Enhanced Detections:
- • Generic.sq
Changes for v12.1.0.1242 - v12.1.0.1245
- New Detections:
- • Generic.uy
- • Generic.uz
- • Generic.vb
- Enhanced Detections:
- • Exploit-PDF.b.gen
- • Generic Downloader.z
- • Generic.uw
- • Generic.ux
Changes for v12.1.0.1240 - v12.1.0.1242
- Enhanced Detections:
- • Generic PWS.o
- • Generic.uw
- • Generic.ux
Changes for v12.1.0.1227 - v12.1.0.1240
- New Detections:
- • Generic.uw
- • Generic.ux
Changes for v12.1.0.1220 - v12.1.0.1227
- Enhanced Detections:
- • Generic.uo
- • Generic.ut
Changes for v12.1.0.1219 - v12.1.0.1220
- Enhanced Detections:
- • Generic.uo
- • Generic.us
Changes for v12.1.0.1215 - v12.1.0.1219
Changes for v12.1.0.1214 - v12.1.0.1215
- Enhanced Detections:
- • Generic.so
- • Generic.ur
Changes for v12.1.0.1201 - v12.1.0.1214
- Enhanced Detections:
- • Generic.so
- • Generic.ur
- • PWS-Zbot.gen.oj
- • W32/Autorun.worm.gt
Changes for v12.1.0.1198 - v12.1.0.1201
- Enhanced Detections:
- • Generic.so
Changes for v12.1.0.1194 - v12.1.0.1198
- Enhanced Detections:
- • Generic.so
- • Generic.uo
- • Generic.ur
Changes for v12.1.0.1189 - v12.1.0.1194
- Enhanced Detections:
- • Generic.uo
Changes for v12.1.0.1185 - v12.1.0.1189
- New Detections:
- • Generic.up
- • Generic.uq
- Enhanced Detections:
- • Generic.so
- • Generic.un
Changes for v12.1.0.1176 - v12.1.0.1185
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • Generic.so
- • Generic.sp
- • Generic.un
- • Generic.uo
Changes for v12.1.0.1173 - v12.1.0.1176
- New Detections:
- • Generic.un
- Enhanced Detections:
- • Generic.ul
- • Generic.un
Changes for v12.1.0.1172 - v12.1.0.1173
- New Detections:
- • Ransom.c!env
- Enhanced Detections:
- • Generic.uh
Changes for v12.1.0.1171 - v12.1.0.1172
- Enhanced Detections:
- • Generic.tm
- • Generic.ul
- • Generic.um
- • PWS-Zbot.gen.oj
Changes for v12.1.0.1165 - v12.1.0.1171
- Enhanced Detections:
- • Generic.tm
- • Generic.um
Changes for v12.1.0.1164 - v12.1.0.1165
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • Generic.tm
- • Generic.uk
Changes for v12.1.0.1153 - v12.1.0.1155
- New Detections:
- • Generic.ul
- • Generic.um
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • Exploit-CVE2012-0158!rtf
- • Generic.so
- • Generic.sq
- • Generic.uk
Changes for v12.1.0.1145 - v12.1.0.1153
- New Detections:
- • OSX/MacDefender
- • OSX/iWorm.b
- Enhanced Detections:
- • Generic.uh
- • Generic.uj
Changes for v12.1.0.1143 - v12.1.0.1145
- New Detections:
- • Generic.uk
- Enhanced Detections:
- • Generic PWS.o
- • Generic.rs
- • Generic.so
Changes for v12.1.0.1140 - v12.1.0.1143
- New Detections:
- • Generic.uj
- Enhanced Detections:
- • Generic.so
- • Generic.ub
- • Generic.uh
Changes for v12.1.0.1123 - v12.1.0.1140
- Enhanced Detections:
- • BackDoor-EXI
- • BackDoor-EYT
- • DDoS-KSig
- • Downloader-CJX
- • Exploit-CVE2012-0158
- • Exploit-MSExcel.p
- • Exploit-SWF!Blacole.dx
- • FakeAlert-AU
- • FakeAlert-AVSoft
- • FakeAlert-B.dr
- • FakeAlert-BF
- • FakeAlert-CK
- • FakeAlert-F
- • FakeAlert-G
- • FakeAlert-GreenAV
- • FakeAlert-HO
- • FakeAlert-I
- • FakeAlert-KS.gen.aw
- • FakeAlert-MaCatte
- • FakeAlert-OT
- • FakeAlert-PA
- • FakeAlert-PC-Care
- • FakeAlert-PJ
- • FakeAlert-PM
- • FakeAlert-QU
- • FakeAlert-SecurityTool.gs
- • FakeAlert-SysAV
- • FakeAlert-Vimes
- • FakeAlert-av360
- • FakeAlert.dx
- • Fakealert-KS
- • Generic Downloader.nx
- • Generic FakeAlert
- • Generic FakeAlert.br
- • Generic.Dropped.a
- • Generic.iz
- • Generic.ji
- • Generic.jl
- • Generic.ju
- • Generic.kc
- • Generic.ki
- • Generic.kl
- • Generic.lm
- • Generic.ly
- • Generic.lz
- • Generic.mb
- • Generic.mg
- • Generic.mo
- • Generic.mp
- • Generic.mu
- • Generic.mz
- • Generic.nb
- • Generic.nd
- • Generic.nk
- • Generic.nv
- • Generic.ny
- • Generic.oa
- • Generic.oc
- • Generic.oq
- • Generic.or
- • Generic.ou
- • Generic.pa
- • Generic.pc
- • Generic.pf
- • Generic.pk
- • Generic.pm
- • Generic.pn
- • Generic.pq
- • Generic.pr
- • Generic.ps
- • Generic.pu
- • Generic.ru
- • Generic.rx
- • Generic.sg
- • Generic.sk
- • Generic.so
- • Generic.sq
- • Generic.tj
- • Generic.tw
- • Generic.ub
- • Generic.uf
- • JS/Exploit-Blacole
- • JS/Exploit-Blacole.jn
- • JV/Blacole.dx
- • PWS-TravNet
- • PWS-Zbot.dx
- • PWS-Zbot.gen.hv
- • Proxy-Agent.af.dr
- • Ransom.dx
- • VBS/Autorun.worm.aaaz
- • W32/Autorun.worm.aabc
- • W32/Autorun.worm.aabl
- • W32/Autorun.worm.aabm
- • W32/Autorun.worm.aaby
- • W32/Autorun.worm.aaj
- • W32/Autorun.worm.ai
- • W32/Autorun.worm.bbc
- • W32/Autorun.worm.bx!atr
- • W32/Autorun.worm.c
- • W32/Autorun.worm.dj
- • W32/Autorun.worm.h
- • W32/Bagle!pwdzip
- • W32/Conficker
- • W32/Conficker.sys
- • W32/Generic.worm.aa
- • W32/IRCbot.worm.gen.am
- • W32/Koobface.worm
- • W32/Lovgate
- • W32/Nuwar.sys
- • W32/Nuwar@MM
- • W32/Vulcanbot
Changes for v12.1.0.1120 - v12.1.0.1123
- New Detections:
- • AFXRootkit
- • AdClicker-EV
- • AlertUp
- • Apropos
- • BackDoor-AWQ
- • BackDoor-AXO
- • BackDoor-BAC
- • BackDoor-CSX
- • BackDoor-CSY
- • BackDoor-CUX
- • BackDoor-CWD
- • BackDoor-DIX
- • BackDoor-DJF
- • BackDoor-DJZ
- • BackDoor-DOQ
- • BackDoor-DSH
- • BackDoor-Spyeye
- • Backdoor-BAC
- • Backdoor-DSN
- • Boiskit
- • Bombat
- • CleanThreadServiceTable
- • Cutwail
- • DISASM
- • DarkWalt.e
- • Darkwalt.a
- • Darkwalt.b
- • Downloader-AUE
- • Downloader-BAI
- • Downloader-ZQ
- • EliteKeylogger
- • Festi
- • Festi.b
- • Festi.c
- • Gapz.a
- • Generic BackDoor.u
- • Generic PWS.y!mem
- • Generic RootKit.a
- • Generic RootKit.e
- • Generic RootKit.f
- • Generic Rootkit.d
- • Generic Rootkit.g
- • Generic.ud
- • Generic.ue
- • Generic.uf
- • Generic.ug
- • HE4Hook
- • HackerDefender
- • Hidden-Process.a
- • HideMost
- • HideVault!sys
- • Intel
- • Keylog-SpyLantern.a
- • Keylog-SpyLantern.b
- • Koutodoor.gen
- • Krnl_Patch_Jmp_Opcode_EB
- • Lando
- • MadCodeHook
- • MemHeur
- • NTRootKit-H
- • NTRootKit-I
- • NTRootKit-J
- • NTRootKit-K
- • NTRootkit-E
- • NTRootkit-S
- • NTRootkit-U
- • NTRootkit-Z
- • Nagyo
- • PWS-Gogo
- • PWS-Goldun
- • PWS-LDPinch
- • PWS-Onlinegames
- • PWS-Progent
- • PWS-Spyeye
- • Patched-Import
- • Pincav.gen
- • Popureb!rootkit
- • Puper
- • Qoolaid.a
- • RKI-02
- • RKI-03
- • RKI-04
- • RKI-05
- • RKI-06
- • RKI-07
- • RKI-08
- • RKI-09
- • RKI-0A
- • RKI-0B
- • RKI-0C
- • RKI-0D
- • RKI-0E
- • RKI-0F
- • RKI-10
- • RKI-11
- • RKI-12
- • RKI-13
- • RKI-14
- • Ramnit
- • RootKit-NTIllusion
- • Rustock
- • Rustock.gen.b
- • Spam-Mailbot.c
- • Spy-Agent.bv
- • Spy-Agent.bw
- • Spy-Agent.de
- • Spy-Agent.dn
- • Srizbi
- • StartPage-KM
- • StealthMBR
- • StealthMBR.a
- • StealthMBR.b
- • StealthMBR.c
- • StealthMBR.d
- • Urburous
- • VAnti
- • Vanquish
- • Vanti
- • W32/Almanahe
- • W32/Almanahe.a
- • W32/Cutwail.a
- • W32/Feebs
- • W32/Fujacks
- • W32/Kolab
- • W32/Lurker
- • W32/Maslan
- • W32/PWS-Zbot
- • W32/Ramnit
- • W32/Routrobot.worm
- • W64/Gapz.a
- • W64/TDSS.d
- • W64/TDSS.f
- • W64/TDSS.g
- • W64/Urburous
- • W64/Xpaj
- • clean_mailbot_c
- • cleanirp
- • cleanssdt
- • image
- • kernel_api
- • killthisrootkit
- • memheur
- • ntfs
- • restoreexports
- • restoreimports
- • rootkit
- • rootscan
- • rootscan64
- • rootscanExtn
- Enhanced Detections:
- • DNSChanger.cw
- • DNSChanger.dx
- • DNSChanger.f
- • Darkwalt.d
- • FakeAlert-AB
- • Generic PWS.o
- • Generic RootKit.a
- • Generic Rootkit.d
- • Generic.dx
- • Generic.so
- • Generic.tm
- • NTRootKit-K
- • PWS-Gogo
- • PWS-Spyeye
- • Spam-Mailbot.c
- • Spy-Agent.bv
- • Spy-Agent.de
- • TDSS.a
- • TDSS.b
- • TDSS.c
- • TDSS.d
- • TDSS.e
- • TDSS.f
- • TDSS.g
- • W32/IRCbot
- • W32/Nuwar
- • W32/Pinkslipbot
- • W32/Xpaj
- • ZeroAccess
Changes for v12.1.0.1110 - v12.1.0.1120
- Enhanced Detections:
- • Generic.tm
- • Generic.uc
Changes for v12.1.0.1107 - v12.1.0.1110
- Enhanced Detections:
- • Generic.sq
- • Generic.tm
- • Generic.ub
Changes for v12.1.0.1102 - v12.1.0.1107
- Enhanced Detections:
- • 1
- • Generic.rs
- • Generic.tm
- • Generic.ub
Changes for v12.1.0.1099 - v12.1.0.1102
- New Detections:
- • Generic.ua
- • Generic.ub
- • Generic.uc
- Enhanced Detections:
- • Generic.it
- • Generic.so
- • Generic.tb
- • Generic.tm
- • Generic.tz
Changes for v12.1.0.1091 - v12.1.0.1099
- Enhanced Detections:
- • Generic.tm
- • Generic.tz
- • Ransom-O
Changes for v12.1.0.1090 - v12.1.0.1091
- New Detections:
- • Generic.tz
- Enhanced Detections:
- • Adware-SearchSuite
- • Exploit-CVE2012-0158
- • Exploit-CVE2012-0507
- • Generic.sq
- • Generic.tm
- • W32/Autorun.worm.c
Changes for v12.1.0.1083 - v12.1.0.1090
- New Detections:
- • Adware-SearchSuite
- Enhanced Detections:
- • Generic.sq
- • Generic.tt
- • VBS/Autorun.worm.k
Changes for v12.1.0.1076 - v12.1.0.1083
- Enhanced Detections:
- • Generic.so
- • Generic.sq
- • Generic.tm
- • Generic.tv
Changes for v12.1.0.1073 - v12.1.0.1076
- New Detections:
- • Generic.tu
- • Generic.tv
- Enhanced Detections:
- • Generic Downloader.z
- • Generic.rs
- • Generic.sq
- • Generic.tm
- • Ransom-O
Changes for v12.1.0.1071 - v12.1.0.1073
- Enhanced Detections:
- • Generic PWS.o
- • Generic.sq
- • Generic.tm
- • Generic.tt
Changes for v12.1.0.1067 - v12.1.0.1071
- Enhanced Detections:
- • Generic.rs
- • Generic.sq
- • Generic.tm
- • Generic.tt
- • W32/Autorun.worm.aaeh
Changes for v12.1.0.1061 - v12.1.0.1067
- New Detections:
- • Generic.tt
- Enhanced Detections:
- • Generic PWS.o
- • Generic.rs
- • Generic.so
- • Generic.tb
- • Generic.tm
- • JS/Exploit-Blacole.le
- • PWS-Zbot.gen.aft
- • Ransom-O
Changes for v12.1.0.1060 - v12.1.0.1061
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • Generic.sq
- • Generic.tm
- • Generic.ts
Changes for v12.1.0.1056 - v12.1.0.1060
- New Detections:
- Generic.ts
- Enhanced Detections:
- Generic.sq
- Generic.tm
- Generic.tr
Changes for v12.1.0.1053 - v12.1.0.1056
- Enhanced Detections:
- Generic PWS.o
- Generic.rs
- Generic.rt
- Generic.tb
Changes for v12.1.0.1051 - v12.1.0.1053
- Enhanced Detections:
- Generic PWS.o
- Generic.rt
- Generic.so
- Generic.sq
- Generic.tm
- VBS/Autorun.worm.k
Changes for v10.2.0.1048 - v12.1.0.1049
- Enhanced Detections:
- • Generic PWS.o
- • Generic.sq
- • Generic.tb
- • Generic.ti
Changes for v12.1.0.1047 - v10.2.0.1048
- Enhanced Detections:
- • Adware-OutBrowse
- • Generic PWS.o
- • Generic.rs
- • Generic.rt
- • Generic.sq
- • Generic.tb
- • Generic.tm
- • Generic.tr
- • cleanStartUpEntriesCLIB
Changes for v12.1.0.1041 - v12.1.0.1047
- New Detections:
- Generic.Dropped.a
- Enhanced Detections:
- Crossrider
- Generic.tb
- Generic.tr
Changes for v12.1.0.1040 - v12.1.0.1041
- New Detections:
- Generic.tr
- Enhanced Detections:
- Generic.rs
- Generic.rt
- Generic.sq
- Generic.tb
- JS/Exploit-Blacole.ht
- Urburous
- W64/Urburous
Changes for v12.1.0.1038 - v12.1.0.1039
- Enhanced Detections:
- • Generic.tb
- • Generic.tq
Changes for v12.1.0.1035 - v12.1.0.1038
- New Detections:
- • Generic.tq
- Enhanced Detections:
- • Generic.tb
- • JS/Exploit-Blacole.ld
- • W32/Autorun.worm.h
Changes for v12.1.0.1030 - v12.1.0.1035
- Enhanced Detections:
- • Generic FakeAlert
- • Generic.so
- • Generic.tb
- • Generic.tp
- • PWS-Zbot.gen.oj
Changes for v12.1.0.1029 - v12.1.0.1030
- New Detections:
- • Urburous
- • W64/Urburous
- Enhanced Detections:
- • Generic FakeAlert.n
- • Generic.tb
- • Generic.tm
- • Generic.tp
- • Ransom-O
- • VBS/Autorun.worm.k
Changes for v12.1.0.1028 - v12.1.0.1029
- New Detections:
- • Generic.tp
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • Generic.tb
- • Generic.tm
- • Generic.to
- • Ransom-O
Changes for v12.1.0.1025 - v12.1.0.1028
- New Detections:
- • Generic.to
- Enhanced Detections:
- • Generic.tb
- • Generic.ti
- • Generic.tm
- • Ransom-O
Changes for v12.1.0.1016 - v12.1.0.1025
- Enhanced Detections:
- Generic.tb
- Generic.tl
Changes for v12.1.0.1015 - v12.1.0.1016
- Enhanced Detections:
- • Generic.so
- • Generic.tb
- • Generic.ti
- • Generic.tm
Changes for v12.1.0.1014 - v12.1.0.1015
- New Detections:
- • Generic.tm
- • Generic.tn
- Enhanced Detections:
- • Generic.tb
- • Generic.ti
- • Generic.tl
- • JS/Exploit-Blacole.ld
- • Ransom-O
Changes for v12.1.0.1011 - v12.1.0.1014
- New Detections:
- • Generic.tj
- • Generic.tk
- • Generic.tl
- Enhanced Detections:
- • Generic Downloader.z
- • Generic.so
- • Generic.tb
- • JS/Wonka
Changes for v12.1.0.1002 - v12.1.0.1011
- Enhanced Detections:
- Adware-BetterSurf
- Exploit-CVE2012-0158!rtf
- Generic.sq
- PWS-ZBot.gen.aux
Changes for v12.1.0.995 - v12.1.0.1002
- Enhanced Detections:
- • Generic.sz
- • Generic.tg
- • PWS-ZBot.gen.avh
Changes for v12.1.0.992 - v12.1.0.995
- Enhanced Detections:
- • Generic Downloader.z
- • Generic.sq
- • Generic.tb
- • Generic.tf
Changes for v12.1.0.990 - v12.1.0.992
- Enhanced Detections:
- • Generic.so
- • Generic.tg
Changes for v12.1.0.987 - v12.1.0.990
- New Detections:
- • Generic.tg
- • Generic.th
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • Generic.sq
- • Generic.tb
- • W32/Autorun.worm.hm
Changes for v12.1.0.985 - v12.1.0.987
- New Detections:
- • Generic.tf
- Enhanced Detections:
- • Crossrider
- • Generic.sq
- • Generic.tb
- • W32/Expiro.gen.ra
- • W64/Expiro.ba
Changes for v12.1.0.981 - v12.1.0.985
- New Detections:
- • PWS-ZBot.gen.avh
- Enhanced Detections:
- • Generic.tb
- • Generic.te
- • W32/Autorun.worm.gt
Changes for v12.1.0.973 - v12.1.0.981
- Enhanced Detections:
- • Generic.tb
- • Generic.te
Changes for v12.1.0.965 - v12.1.0.973
- Enhanced Detections:
- • Generic.tb
- • Generic.td
- • JS/Exploit-Blacole.ht
Changes for v12.1.0.960 - v12.1.0.965
- Enhanced Detections:
- • Adware-BetterSurf
- • Generic.sq
Changes for v12.1.0.959 - v12.1.0.960
- Enhanced Detections:
- • Bojan
- • Generic Downloader.z
- • Generic.sq
- • Generic.sr
- • Generic.ta
- • PWS-ZBot.gen.aux
- • W32/Rimecud
Changes for v12.1.0.954 - v12.1.0.959
- New Detections:
- • Generic.ta
- Enhanced Detections:
- • Generic.sq
- • Somoto-BetterInstaller
Changes for v12.1.0.949 - v12.1.0.954
- Enhanced Detections:
- • Generic.sq
- • Generic.sv
Changes for v12.1.0.943 - v12.1.0.949
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • Generic Downloader.z
- • Generic.sq
- • Generic.sr
- • W32/Autorun.worm.gt
Changes for v12.1.0.939 - v12.1.0.943
- Enhanced Detections:
- • Generic.sv
Changes for v12.1.0.936 - v12.1.0.939
- New Detections:
- • Generic.sx
- • Generic.sy
- • Generic.sz
- Enhanced Detections:
- • Adware-BetterSurf
- • Generic.sq
- • Generic.su
- • JV/Exploit-Blacole.t
- • PWS-Zbot.dx
Changes for v12.1.0.931 - v12.1.0.936
- New Detections:
- • Generic-PWS!CPL
- • Generic-PWS!rtf
- • PWS-FACH
- • PWS-FBNX
- • PWS-FBOI.dr
- • PWS-FBOJ
- • PWS-ZBot.gen.auz
- • PWS-ZBot.gen.ava
- • PWS-ZBot.gen.avd
- • PWS-ZBot.gen.ave
- • T-PWS-BLJ
- Enhanced Detections:
- • Generic PWS.o
- • Generic.sq
Changes for v12.1.0.930 - v12.1.0.931
- Enhanced Detections:
- • FakeAlert-IN
- • Generic.sq
- • PWS-ZBot.gen.aul
- • PWS-Zbot.dx
- • Ransom-O
- • W32/Autorun.worm.c
Changes for v12.1.0.924 - v12.1.0.930
- New Detections:
- • Downloader-BPJ.gen.a
- • Encoded Executable
- • Exploit-PDF!Blacole.dx
- • Exploit-SWF!Blacole.dx
- • FakeAlert.dx
- • Generic.Miuref.dx
- • Generic.Upatre.dx
- • Generic.dam
- • Generic.iu
- • Generic.iv
- • Generic.ix
- • Generic.iy
- • Generic.iz
- • Generic.ja
- • Generic.jb
- • Generic.jc
- • Generic.jd
- • Generic.je
- • Generic.jf
- • Generic.jg
- • Generic.jh
- • Generic.ji
- • Generic.jj
- • Generic.jk
- • Generic.jl
- • Generic.jm
- • Generic.jn
- • Generic.jo
- • Generic.jr
- • Generic.js
- • Generic.jt
- • Generic.ju
- • Generic.jv
- • Generic.jw
- • Generic.jz
- • Generic.ka
- • Generic.kb
- • Generic.kc
- • Generic.kd
- • Generic.ke
- • Generic.kf
- • Generic.kg
- • Generic.kh
- • Generic.ki
- • Generic.kj
- • Generic.kl
- • Generic.km
- • Generic.kn
- • Generic.ko
- • Generic.kq
- • Generic.kr
- • Generic.ks
- • Generic.kt
- • Generic.ku
- • Generic.kv
- • Generic.kw
- • Generic.kx
- • Generic.ky
- • Generic.kz
- • Generic.la
- • Generic.lb
- • Generic.lc
- • Generic.ld
- • Generic.le
- • Generic.lf
- • Generic.lg
- • Generic.lh
- • Generic.li
- • Generic.lm
- • Generic.ln
- • Generic.lo
- • Generic.lp
- • Generic.lq
- • Generic.lr
- • Generic.ls
- • Generic.lt
- • Generic.lu
- • Generic.lv
- • Generic.lw
- • Generic.ly
- • Generic.lz
- • Generic.ma
- • Generic.mb
- • Generic.mc
- • Generic.md
- • Generic.me
- • Generic.mg
- • Generic.mh
- • Generic.mi
- • Generic.mj
- • Generic.mk
- • Generic.ml
- • Generic.mm
- • Generic.mn
- • Generic.mo
- • Generic.mp
- • Generic.mq
- • Generic.mr
- • Generic.ms
- • Generic.mt
- • Generic.mu
- • Generic.mv
- • Generic.mw
- • Generic.mx
- • Generic.my
- • Generic.mz
- • Generic.na
- • Generic.nb
- • Generic.nc
- • Generic.nd
- • Generic.ne
- • Generic.nf
- • Generic.ng
- • Generic.nh
- • Generic.ni
- • Generic.nj
- • Generic.nk
- • Generic.nl
- • Generic.nm
- • Generic.nn
- • Generic.no
- • Generic.np
- • Generic.nq
- • Generic.nr
- • Generic.ns
- • Generic.nt
- • Generic.nu
- • Generic.nv
- • Generic.nw
- • Generic.nx
- • Generic.ny
- • Generic.nz
- • Generic.oa
- • Generic.ob
- • Generic.oc
- • Generic.od
- • Generic.oe
- • Generic.of
- • Generic.og
- • Generic.oh
- • Generic.oi
- • Generic.oj
- • Generic.ok
- • Generic.ol
- • Generic.om
- • Generic.on
- • Generic.oo
- • Generic.op
- • Generic.oq
- • Generic.or
- • Generic.os
- • Generic.ot
- • Generic.ou
- • Generic.ov
- • Generic.ow
- • Generic.ox
- • Generic.oy
- • Generic.oz
- • Generic.pa
- • Generic.pb
- • Generic.pc
- • Generic.pd
- • Generic.pe
- • Generic.pf
- • Generic.pg
- • Generic.ph
- • Generic.pi
- • Generic.pj
- • Generic.pk
- • Generic.pl
- • Generic.pm
- • Generic.pn
- • Generic.po
- • Generic.pp
- • Generic.pq
- • Generic.pr
- • Generic.ps
- • Generic.pt
- • Generic.pu
- • Generic.pw
- • Generic.px
- • Generic.py
- • Generic.pz
- • Generic.qa
- • Generic.qb
- • Generic.qc
- • Generic.qd
- • Generic.qe
- • Generic.qf
- • Generic.qg
- • Generic.qi
- • Generic.qj
- • Generic.qk
- • Generic.ql
- • Generic.qm
- • Generic.qn
- • Generic.qo
- • Generic.qp
- • Generic.qq
- • Generic.qr
- • Generic.qs
- • Generic.qt
- • Generic.qu
- • Generic.qv
- • Generic.qw
- • Generic.qx
- • Generic.qy
- • Generic.qz
- • Generic.ra
- • Generic.rb
- • Generic.rc
- • Generic.rd
- • Generic.re
- • Generic.rf
- • Generic.rg
- • Generic.rh
- • Generic.ri
- • Generic.rj
- • Generic.rk
- • Generic.rl
- • Generic.rm
- • Generic.rv
- • Generic.rw
- • Generic.rx
- • Generic.ry
- • Generic.rz
- • Generic.sa
- • Generic.sb
- • Generic.sc
- • Generic.sd
- • Generic.se
- • Generic.sg
- • Generic.sh
- • Generic.si
- • Generic.sj
- • Generic.sk
- • Generic.sl
- • Generic.sm
- • Generic.sn
- • Generic.so
- • Generic.sp
- • Generic.sq
- • Generic.sr
- • Generic.ss
- • Generic.st
- • Generic.su
- • Generic.sv
- • JS/Blacole.dx
- • JV/Blacole.dx
- • PWS-Zbot.dx
- • PWS-Zbot.dx!rar
- • PWS-Zbot.dx!zip
- • Ransom.dx
- • Suspicious Keygen!rar
- • Trojan-SkyHook
- • Upatre.dx!zip
- • W32/Generic.worm!irc
- • W32/Generic.worm.aa
- • W32/Generic.worm.ab
- • W32/Generic.worm.ac
- • W32/Generic.worm.ad
- • W32/Generic.worm.ae
- • W32/Generic.worm.af
- • W32/Generic.worm.ag
- • W32/Generic.worm.h
- • W32/Generic.worm.i
- • W32/Generic.worm.j
- • W32/Generic.x
- • W32/Generic.y
- • W32/Generic.z
- • ransom.dx
- • with fishy extension
- • ~T-SUS-BT
- • ~T-SUS-BU
- • ~T-SUS-BV
- Enhanced Detections:
- • Adware-Crossrider
- • Exploit-PDF.b.gen
- • FakeAlert.dx
- • Generic.dam
- • Generic.dx
- • Generic.it
- • Generic.oh
- • Generic.on
- • Generic.ow
- • Generic.rk
- • Generic.so
- • Generic.sp
- • Generic.sq
- • Generic.sr
- • Generic.st
- • Generic.su
- • JV/Blacole.dx
- • PWS-ZBot.gen.aux
- • PWS-Zbot
- • PWS-Zbot.dx
- • PWS-Zbot.dx!zip
- • PWS-Zbot.gen.oj
- • Ransom.dx
- • Trojan-SkyHook
- • Upatre.dx!zip
- • ZeroAccess
- • ransom.dx
Changes for v12.1.0.921 - v12.1.0.924
- Enhanced Detections:
- Crossrider
- PWS-Zbot.gen.oj
Changes for v12.1.0.907 - v12.1.0.908
- New Detections:
- W64/Expiro.bb
Changes for v12.1.0.901 - v12.1.0.907
- Enhanced Detections:
- • W32/Autorun.worm.c
Changes for v12.1.0.898 - v12.1.0.901
- Enhanced Detections:
- • Crossrider
- • PWS-ZBot.gen.aul
- • PWS-Zbot.gen.oj
Changes for v12.1.0.893 - v12.1.0.898
- Enhanced Detections:
- • Adware-OutBrowse
- • Adware-SweetIM
Changes for v12.1.0.892 - v12.1.0.893
- New Detections:
- • Luckyleap
- Enhanced Detections:
- • Adware-OutBrowse
- • Crossrider
- • W32/Autorun.worm.c
Changes for v12.1.0.891 - v12.1.0.892
- Enhanced Detections:
- • Generic.it
- • PUP-FGB
- • PWS-Zbot.gen.oj
- • W32/Mariofev!mem
Changes for v12.1.0.888 - v12.1.0.891
- New Detections:
- • PowerPack
- Enhanced Detections:
- • Adware-BetterSurf
- • Exploit-CVE2010-0188
- • PWS-ZBot.gen.aul
Changes for v12.1.0.887 - v12.1.0.888
- Enhanced Detections:
- Adware-SweetIM
- Exploit-CVE2012-0158
Changes for v12.1.0.884 - v12.1.0.887
- Enhanced Detections:
- Adware-OutBrowse
- Crossrider
- Generic.it
- PWS-Zbot.gen.alh
- PWS-Zbot.gen.oj
- W32/XDocCrypt.b
Changes for v12.1.0.883 - v12.1.0.884
- Enhanced Detections:
- • Adware-OutBrowse
- • Crossrider
- • Exploit-PDF.b.gen
- • PWS-ZBot.gen.aux
- • PWS-Zbot.gen.agz
- • PWS-Zbot.gen.alh
- • PWS-Zbot.gen.ana
- • PWS-Zbot.gen.anj
- • PWS-Zbot.gen.oj
- • W32/Autorun.worm.c
Changes for v12.1.0.879 - v12.1.0.883
- Enhanced Detections:
- • Generic Downloader.z
Changes for v12.1.0.878 - v12.1.0.879
- Enhanced Detections:
- • Adware-OutBrowse
- • Generic Downloader.z
- • PWS-ZBot.gen.auh
- • PWS-Zbot.gen.oj
- • W32/Conficker.worm!job
Changes for v12.1.0.877 - v12.1.0.878
- Enhanced Detections:
- PWS-Zbot.gen.oj
- VBS/FakePAV
- W32/XDocCrypt.a
- W32/XDocCrypt.a!rem
Changes for v12.1.0.876 - v12.1.0.877
- Enhanced Detections:
- Crossrider
Changes for v12.1.0.875 - v12.1.0.876
- Enhanced Detections:
- Generic Downloader.z
- PWCrack-PWDump
- PWS-ZBot.gen.aul
- PWS-ZBot.gen.aux
- W32/Autorun.worm.c
Changes for v12.1.0.872 - v12.1.0.875
- New Detections:
- • SuspendAliasProcessesCLIB
- Enhanced Detections:
- • Generic Downloader.z
- • RemoveMaliciousThreadsCLIB
- • W32/Conficker.worm
- • cleanIFEOCLIB
- • cleanPoliciesCLIB
- • killdllCLIB
Changes for v12.1.0.871 - v12.1.0.872
- Enhanced Detections:
- • Adware-BetterSurf
- • Adware-Bprotect
- • Adware-SweetIM
Changes for v12.1.0.869 - v12.1.0.871
- Enhanced Detections:
- • Adware-BetterSurf
- • Crossrider
- • Generic Downloader.z
- • JS/PornPopup
- • PWS-ZBot.gen.auh
- • PWS-Zbot.gen.apr
- • PWS-Zbot.gen.oj
Changes for v12.1.0.865 - v12.1.0.869
- Enhanced Detections:
- • Adware-SweetIM
- • PWS-Zbot.gen.oj
- • VBS/Autorun.worm.k
Changes for v12.1.0.862 - v12.1.0.865
- New Detections:
- • FakeAlert-FTM
- Enhanced Detections:
- • FakeAlert-DZ
- • Generic Downloader.z
- • PWS-ZBot.gen.aux
- • PWS-Zbot.gen.oj
Changes for v12.1.0.860 - v12.1.0.862
- New Detections:
- • W64/Expiro.ba
- Enhanced Detections:
- • Adware-Bprotect
- • Crossrider
- • PWS-ZBot.gen.aul
- • PWS-Zbot.gen.oj
- • VBS/FakePAV
Changes for v12.1.0.858 - v12.1.0.860
- Enhanced Detections:
- PWS-Zbot.gen.oj
- ZeroAccess!cfg
Changes for v12.1.0.857 - v12.1.0.858
- Enhanced Detections:
- Generic Downloader.z
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
Changes for v12.1.0.854 - v12.1.0.857
- New Detections:
- • VBS/FakePAV
- Enhanced Detections:
- • Crossrider
- • Generic Downloader.z
- • W32/Autorun.worm.gt
Changes for v12.1.0.853 - v12.1.0.854
- Enhanced Detections:
- Generic Downloader.z
- W32/Autorun.worm.gen.za
Changes for v12.1.0.851 - v12.1.0.853
- New Detections:
- 32/Expiro.gen.ra
- Enhanced Detections:
- Adware-OutBrowse
- W32/Expiro.gen.r
Changes for v12.1.0.846 - v12.1.0.847
- New Detections:
- • W32/Expiro.gen.r
- Enhanced Detections:
- • PWS-Zbot.gen.oj
- • W64/Expiro.b
Changes for v12.1.0.843 - v12.1.0.846
- Enhanced Detections:
- • Adware-Bprotect
- • Distromatic
- • PWS-Zbot.gen.oj
- • W32/Expiro.gen.p
- • W64/Expiro.a
Changes for v12.1.0.839 - v12.1.0.843
- Enhanced Detections:
- Adware-BetterSurf
Changes for v12.1.0.837 - v12.1.0.839
- New Detections:
- Exploit-CVE2012-0158.k!rtf
- Enhanced Detections:
- Adware-OutBrowse
- Exploit-CVE2012-0158!rtf
- Generic FakeAlert.bw
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
Changes for v12.1.0.832 - v12.1.0.837
- New Detections:
- • Distromatic
- Enhanced Detections:
- • FakeAlert-SecurityTool.fo
- • Mplug.gen.a
Changes for v12.1.0.830 - v12.1.0.832
- Enhanced Detections:
- Crossrider
- PWS-ZBot.gen.aul
- W32/Autorun.worm.c
- W32/Ramnit.e
Changes for v12.1.0.827 - v12.1.0.830
Changes for v12.1.0.826 - v12.1.0.827
- New Detections:
- Crossrider
- Enhanced Detections:
- Adware-OutBrowse
- Crossrider
- HTool-JSP/WebShell
Changes for v12.1.0.825 - v12.1.0.826
- Enhanced Detections:
- Adware-OutBrowse
Changes for v12.1.0.824 - v12.1.0.825
- Enhanced Detections:
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
Changes for v12.1.0.823 - v12.1.0.824
- New Detections:
- • PWS-ZBot.gen.avb
- • PWS-ZBot.gen.avc
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • JS/Exploit-Blacole.gc
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.ml
- • JS/Exploit-Blacole.mp
- • JS/Exploit-Blacole.na
- • PWS-Zbot.gen.oj
Changes for v12.1.0.818 - v12.1.0.823
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole.ml
Changes for v12.1.0.817 - v12.1.0.818
- New Detections:
- JS/PornPopup
- Enhanced Detections:
- FakeAlert-SecurityTool.fm
- Generic FakeAlert.n
- PWS-ZBot.gen.aux
Changes for v12.1.0.816 - v12.1.0.817
- Enhanced Detections:
- Adware-OutBrowse
- Generic Downloader.z
- HTool-JSPRat
Changes for v12.1.0.815 - v12.1.0.816
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- PWS-ZBot.gen.aul
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
Changes for v12.1.0.811 - v12.1.0.815
- New Detections:
- • JS/Exploit-Blacole.na
- Enhanced Detections:
- • HTool-JSPRat
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.ml
- • JS/Exploit-Blacole.mt
- • PWS-Zbot.gen.oj
Changes for v12.1.0.807 - v12.1.0.811
- Enhanced Detections:
- • Adware-Bprotect
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • PWS-Zbot
Changes for v12.1.0.806 - v12.1.0.807
- New Detections:
- • HTool-JSP/WebShell
- Enhanced Detections:
- • Exploit-CVE-2010-2568
- • Generic Downloader.z
- • HTool-JSP/WebShell
- • JS/Exploit-Blacole.he
- • PWS-Zbot.gen.oj
- • W32/Autorun.worm.aabl!lnk
- • W32/Conficker.worm!job
Changes for v12.1.0.802 - v12.1.0.806
- Enhanced Detections:
- • Adware-BetterSurf
- • Adware-Eorezo
- • Exploit-PDF.rt.gen
- • FakeAlert-IN
- • Generic Downloader.z
- • JS/Exploit-Blacole.gc
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.ml
Changes for v12.1.0.799 - v12.1.0.802
- Enhanced Detections:
- Downloader-CEW.ad
- Exploit-DcomRpc.b
- FakeAlert-AB.dldr
- FakeAlert-AG
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- FakeAlert-SecurityTool.ab
- FakeAlert-Y
- Generic Downloader.z
- Generic FakeAlert
- Generic PWS.agq
- Generic.it
- Generic.iw
- Generic.jp
- Generic.jq
- Generic.jx
- Generic.jy
- Generic.kk
- Generic.kp
- Generic.lx
- Generic.mf
- PWS-Zbot.gen.acz
- PWS-Zbot.gen.and
- PWS-Zbot.gen.oj
- SkyWiper!Cert
- W32/Autorun.worm.aabl
- W32/Autorun.worm.gt
- W32/Autorun.worm.zm
- W32/Conficker.worm
- W32/Rimecud
- W32/Sdbot.worm
- ZeroAccess.ce
Changes for v12.1.0.798 - v12.1.0.799
- New Detections:
- HTool-JSPRat
- Enhanced Detections:
- DirectDownminer
- Generic Downloader.z
- W32/Autorun.worm.h
Changes for v12.1.0.797 - v12.1.0.798
- New Detections:
- • Generic-PWS!CPL
- • Generic-PWS!rtf
- Enhanced Detections:
- • Exploit-PDF.rt.gen
- • FakeAlert-SecurityTool.eb
- • Generic Downloader.z
- • PWS-ZBot.gen.aux
Changes for v12.1.0.796 - v12.1.0.797
- Enhanced Detections:
- • JS/Exploit-Blacole.gc
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.ml
- • JS/Exploit-Blacole.mz
Changes for v12.1.0.795 - v12.1.0.796
- Enhanced Detections:
- • PWS-ZBot.gen.aul
Changes for v12.1.0.791 - v12.1.0.795
- Enhanced Detections:
- • Adware-OutBrowse
- • Generic Downloader.z
- • PWS-ZBot.gen.aux
- • cleanWinLogonCLIB
- • delshortcutsCLIB
- • killdllCLIB
Changes for v12.1.0.790 - v12.1.0.791
- Enhanced Detections:
- • Generic Downloader.z
- • JS/Blacole-Redirect.u
- • W32/Autorun.worm.c
Changes for v12.1.0.784 - v12.1.0.786
- New Detections:
- • DirectDownminer
- Enhanced Detections:
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.l
- • PWS-ZBot.gen.aux
Changes for v12.1.0.781 - v12.1.0.784
- Enhanced Detections:
- • Generic PWS.yt.dr
- • JS/Exploit-Blacole.l
- • PWS-Zbot.gen.agz
- • W32/Autorun.worm.c
- • W32/Autorun.worm.hm
- • W32/Conficker.worm!job
- • W64/Expiro.a
Changes for v12.1.0.779 - v12.1.0.781
- Enhanced Detections:
- • JS/Exploit-Blacole.l
- • PWS-Zbot.gen.agz
- • W32/Autorun.worm.c
- • W32/Autorun.worm.hm
- • W64/Expiro.a
Changes for v12.1.0.777 - v12.1.0.779
- Enhanced Detections:
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
- W32/Expiro.gen.p
- W64/Expiro.a
Changes for v12.1.0.776 - v12.1.0.777
- New Detections:
- JS/Downloader-FCV
- Enhanced Detections:
- Generic Downloader.z
- PWS-Zbot.gen.oj
- W32/Autorun.worm.hm
- W32/Expiro.gen.p
- W32/Sality!mem
Changes for v12.1.0.772 - v12.1.0.773
- Enhanced Detections:
- Exploit-CVE2012-0158
- Generic Downloader.z
- PWS-ZBot.gen.auz
Changes for v12.1.0.771 - v12.1.0.772
- Enhanced Detections:
- • Adware-Eorezo
- • Generic Downloader.z
- • W32/Sality!mem
Changes for v12.1.0.769 - v12.1.0.771
- Enhanced Detections:
- • FakeAlert-SecurityTool
- • FakeAlert-SecurityTool.es
- • JS/Exploit-Blacole.l
- • PWS-ZBot.gen.aul
- • PWS-Zbot.gen.oj
- • W32/Autorun.worm.c
- • W32/Conficker.worm.gen.b
- • W32/Sality!mem
Changes for v12.1.0.766 - v12.1.0.769
- Enhanced Detections:
- Adware-OutBrowse
- Generic Downloader.z
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mx
- PWS-Zbot.gen.oj
- W32/Autorun.worm.h
- W32/Sality!mem
Changes for v12.1.0.765 - v12.1.0.766
- Enhanced Detections:
- Exploit-PDF.rt.gen
- Generic Downloader.z
- JS/Exploit-Blacole.eu
Changes for v12.1.0.763 - v12.1.0.765
- Enhanced Detections:
- Adware-MegaSearch
- Generic Downloader.z
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mp
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
- W64/Expiro.a
Changes for v12.1.0.760 - v12.1.0.763
- Enhanced Detections:
- Exploit-CVE2012-0158
- JS/Exploit-Blacole.my
- PWS-ZBot.gen.aul
- W32/Expiro.gen.p
Changes for v12.1.0.759 - v12.1.0.760
- Enhanced Detections:
- • Adware-BetterSurf
- • Adware-OutBrowse
- • JS/Exploit-Blacole.my
Changes for v12.1.0.751 - v12.1.0.759
- New Detections:
- PWS-FBOI.dr
- Enhanced Detections:
- Downloader-BCS
Changes for v12.1.0.750 - v12.1.0.751
- New Detections:
- PWS-FBOJ
- Tool-NetCat
- Enhanced Detections:
- Adware-SweetIM
- FakeAlert-FHR
- Generic Downloader.z
- JS/Exploit-Blacole.my
- PWS-Zbot.gen.oc
- W32/Expiro.gen.p
Changes for v12.1.0.749 - v12.1.0.750
- New Detections:
- • JS/Exploit-Blacole.my
- • T-OBS-AGV
- Enhanced Detections:
- • FakeAlert-SecurityTool.fv
- • Generic FakeAlert
- • WebexpEnhanced
Changes for v12.1.0.747 - v12.1.0.749
- New Detections:
- • Adware-BetterSurf
- • Adware-OutBrowse
- • PUP-FGB
- • PUP-FGC
- • PUP-FGE
- • PWS-FBNX
- Enhanced Detections:
- • Generic Downloader.z
- • Generic FakeAlert
- • Generic VB.jb
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.gb
- • JS/Exploit-Blacole.gc
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.l
- • JS/Exploit-Blacole.ml
- • JS/Exploit-Blacole.mw
- • JS/Exploit-Blacole.mx
- • W32/Expiro.gen.p
Changes for v12.1.0.743 - v12.1.0.744
- New Detections:
- Backdoor-FBOY
- Enhanced Detections:
- Exploit-CVE2012-0507
- FakeAlert-SecurityTool.fa
- Generic Downloader.z
- PWS-ZBot.gen.aul
- PWS-Zbot
- W32/Autorun.worm.h
Changes for v12.1.0.742 - v12.1.0.743
- New Detections:
- JS/Exploit-Blacole.mx
- WebexpEnhanced
- Enhanced Detections:
- FakeAlert-SecurityTool.fa
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ml
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
Changes for v12.1.0.741 - v12.1.0.742
- Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.
- New Detections:
- JS/Exploit-Blacole.mw
- Enhanced Detections:
- FakeAlert-SecurityTool.fa
- Generic Downloader.z
- JS/Exploit-Blacole.gb
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.hu
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mu
- JS/Exploit-Blacole.mv
- PWS-ZBot.gen.auk
- PWS-ZBot.gen.auz
- PWS-ZBot.gen.ava
- TDSS.ag
- W32/Autorun.worm.h
- W32/Expiro.gen.p
- W64/Expiro.a
Changes for v12.1.0.740 - v12.1.0.741
- Enhanced Detections:
- FakeAlert-SecurityTool.fa
- Generic Downloader.z
- JS/Exploit-Blacole.gb
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.hu
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mu
- JS/Exploit-Blacole.mv
- PWS-ZBot.gen.auk
- PWS-ZBot.gen.auz
- PWS-ZBot.gen.ava
- TDSS.ag
- W32/Autorun.worm.h
- W32/Expiro.gen.p
- W64/Expiro.a
Changes for v12.1.0.735 - v12.1.0.740
- New Detections:
- Enhanced Detections:
- FakeAlert-SecurityTool.fa
- Generic Downloader.z
- JS/Exploit-Blacole.gb
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.hu
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mu
- JS/Exploit-Blacole.mv
- TDSS.ag
- W32/Autorun.worm.h
- W32/Expiro.gen.p
- W64/Expiro.a
Changes for v12.1.0.734 - v12.1.0.735
- New Detections:
- Enhanced Detections:
- FakeAlert-SecurityTool.fa
- Generic Downloader.z
- JS/Exploit-Blacole.gb
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mu
- W32/Autorun.worm.h
- W32/Expiro.gen.p
- W64/Expiro.a
Changes for v12.1.0.732 - v12.1.0.734
- Enhanced Detections:
- • FakeAlert-SecurityTool.fa
- • Generic Downloader.z
- • JS/Exploit-Blacole.gb
- • JS/Exploit-Blacole.ht
- • W32/Autorun.worm.h
Changes for v12.1.0.729 - v12.1.0.732
- New Detections:
- Enhanced Detections:
- Generic Downloader.z
Changes for v12.1.0.726 - v12.1.0.729
- Enhanced Detections:
- • PWS-Zbot
- • W32/Sality.dr
Changes for v12.1.0.725 - v12.1.0.726
- Enhanced Detections:
- • JS/Exploit-Blacole.ml
- • JS/Exploit-Blacole.mp
- • JS/Exploit-Blacole.mt
- • W32/Autorun.worm.c
- • W32/Expiro.gen.p
- • W32/Sality
- • W64/Expiro.a
- • ZeroAccess.dr
Changes for v12.1.0.720 - v12.1.0.725
- New Detections:
- • W32/Expiro.gen.p
- • W64/Expiro.a
- Enhanced Detections:
- • Generic FakeAlert
Changes for v12.1.0.717 - v12.1.0.720
- New Detections:
- • JS/Exploit-Blacole.mv
- Enhanced Detections:
- • Generic Downloader.z
- • JS/Exploit-Blacole.hu
Changes for v12.1.0.711 - v12.1.0.717
- New Detections:
- • Adware-BSurf
- • W32/Dexter
- Enhanced Detections:
- • JS/Exploit-Blacole.ml
- • JS/Exploit-Blacole.ms
Changes for v12.1.0.709 - v12.1.0.711
- New Detections:
- • JS/Exploit-Blacole.mu
- • PWS-ZBot.gen.ava
- Enhanced Detections:
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.hu
- • JS/Exploit-Blacole.le
- • JS/Exploit-Blacole.mi
- • JS/Exploit-Blacole.ml
- • JS/Exploit-Blacole.mr
- • PWS-ZBot.gen.aux
- • PWS-Zbot.gen.oj
Changes for v12.1.0.708 - v12.1.0.709
- Enhanced Detections:
- • PWS-Zbot.gen.oj
Changes for v12.1.0.706 - v12.1.0.708
- New Detections:
- • JS/Exploit-Blacole.mt
- Enhanced Detections:
- • Exploit-CVE2012-0507
- • JS/Exploit-Blacole.le
- • JS/Exploit-Blacole.ml
- • JS/Exploit-Blacole.mp
- • W32/Autorun.worm.eu
Changes for v12.1.0.703 - v12.1.0.706
- New Detections:
- Htool-Relayd
- Enhanced Detections:
- Generic Downloader.z
- Generic VB.jb
- PWS-Zbot.gen.oj
Changes for v12.1.0.700 - v12.1.0.703
- New Detections:
- JS/Exploit-Blacole.ms
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole.mi
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mp
- PWS-ZBot.gen.auz
- PWS-Zbot.gen.oj
Changes for v12.1.0.695 - v12.1.0.700
- New Detections:
- • JS/Exploit-Blacole.mr
- Enhanced Detections:
- • Adware-Bprotect
- • Adware-Monetizer
- • Adware-SweetIM
- • JS/Exploit-Blacole!heur
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.hu
- • JS/Exploit-Blacole.mi
- • JS/Exploit-Blacole.mp
- • PWS-Zbot.gen.ds
- • PWS-Zbot.gen.oj
Changes for v12.1.0.690 - v12.1.0.695
- Enhanced Detections:
- • FakeAlert-AVPSec!env.g
- • False Digisig present
- • Generic FakeAlert.n
- • PWS-Zbot.gen.oj
Changes for v12.1.0.685 - v12.1.0.690
- New Detections:
- Adware-Monetizer
- Enhanced Detections:
- Generic PWS.yt.dr
- JS/Exploit-Blacole.ht
- JV/Exploit-Blacole
Changes for v12.1.0.683 - v12.1.0.685
- New Detections:
- Adware-SweetIM
- PWS-ZBot.gen.auz
- Enhanced Detections:
- W32/Autorun.worm.c
Changes for v12.1.0.680 - v12.1.0.683
- Enhanced Detections:
- • FakeAlert-IN
- • Generic Downloader.z
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.ml
- • JS/Exploit-Blacole.mp
- • JS/Exploit-Blacole.mq
- • PWS-ZBot.gen.aux
- • PWS-Zbot
- • PWS-Zbot.gen.oj
- • W32/Autorun.worm.c
- • W32/Autorun.worm.hm
- • ZeroAccess.d
Changes for v12.1.0.675 - v12.1.0.680
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mp
- PWS-Zbot.gen.oj
Changes for v12.1.0.669 - v12.1.0.675
- Enhanced Detections:
- FakeAlert-FHR
- Generic.gl
- JS/Exploit-Blacole.mn
- JS/Exploit-Blacole.mo
- PWS-ZBot.gen.aux
- VBS/Autorun.worm.k
- Vundo
Changes for v12.1.0.663 - v12.1.0.669
- Enhanced Detections:
- FakeAlert-AVPSec!env.g
- Generic.gl
- JS/Exploit-Blacole!heur
- PWS-ZBot.gen.auq
- PWS-ZBot.gen.aux
- W32/Autorun.worm.h
Changes for v12.1.0.658 - v12.1.0.663
- Enhanced Detections:
- • PWS-ZBot.gen.auk
- • PWS-Zbot.gen.oj
Changes for v12.1.0.654 - v12.1.0.658
- New Detections:
- • DriverPack
- • JS/Exploit-Blacole.mq
- Enhanced Detections:
- • Generic Downloader.z
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.ml
- • PWS-ZBot.gen.aux
- • PWS-Zbot.gen.oj
- • W32/Autorun.worm.g
Changes for v12.1.0.652 - v12.1.0.654
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • Generic Downloader.z
- • JS/Exploit-Blacole.ml
- • PWS-Zbot
- • PWS-Zbot.gen.oj
- • ZeroAccess.d
Changes for v12.1.0.649 - v12.1.0.652
- Enhanced Detections:
- • Adware-Eorezo
- • Generic VB.iv
- • JS/Exploit-Blacole.ml
- • PWS-ZBot.gen.auk
Changes for v12.1.0.648 - v12.1.0.649
- New Detections:
- JS/Exploit-Blacole.mp
- Enhanced Detections:
- JS/Exploit-Blacole.cw
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ml
- JS/Exploit-Blacole.mm
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
- W32/Autorun.worm.h
Changes for v12.1.0.642 - v12.1.0.648
- New Detections:
- • JS/Exploit-Blacole.mn
- • JS/Exploit-Blacole.mo
- Enhanced Detections:
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.ml
- • PWS-Zbot.gen.oj
- • W32/Autorun.worm.c
Changes for v12.1.0.639 - v12.1.0.642
- New Detections:
- • T-PWS-BLJ
- Enhanced Detections:
- • 1
- • Adware-Bprotect
- • Generic Downloader.z
- • PWS-ZBot.gen.aux
- • PWS-Zbot.gen.oj
- • W32/Autorun.worm.c
Changes for v12.1.0.636 - v12.1.0.639
- New Detections:
- • JS/Exploit-Blacole.mm
- • Toolbar-Inbox
- Enhanced Detections:
- • Generic Downloader.z
- • JS/Exploit-Blacole.cw
- • JS/Exploit-Blacole.gc
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.ip
- • JS/Exploit-Blacole.mi
- • JS/Exploit-Blacole.ml
- • JV/Exploit-Blacole.t
- • PWS-Zbot.gen.oj
Changes for v12.1.0.634 - v12.1.0.636
- Enhanced Detections:
- Adware-Bprotect
- PWS-ZBot.gen.auk
- PWS-ZBot.gen.aux
Changes for v12.1.0.632 - v12.1.0.634
- New Detections:
- JS/Exploit-Blacole.ml
- RAR-Exploit
- Enhanced Detections:
- Exploit-CVE2012-0158
- Exploit-PDF.rt.gen
- FakeAlert-DZ
- FakeAlert-SecurityTool
- FakeAlert-WinWebSec
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.mj
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
- ZeroAccess
Changes for v12.0.0.629 - v12.1.0.632
- New Detections:
- JS/Exploit-Blacole.ml
- RAR-Exploit
- Enhanced Detections:
- FakeAlert-SecurityTool
- FakeAlert-WinWebSec
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.mj
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
- ZeroAccess
Changes for v12.1.0.627 - v12.0.0.629
- New Detections:
- InstallMonster
- JS/Exploit-Blacole.mk
- Enhanced Detections:
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.mi
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
Changes for v12.1.0.624 - v12.1.0.627
- New Detections:
- Enhanced Detections:
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
Changes for v12.1.0.623 - v12.1.0.624
- New Detections:
- • InstallCore
- Enhanced Detections:
- • FakeAlert-SecurityTool
- • PWS-Zbot.gen.oj
Changes for v12.1.0.622 - v12.1.0.623
- New Detections:
- • FakeAlert-WinWebSec
- • OSX/Baoba
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • FakeAlert-SecurityTool
- • JS/Blacole-Exploit
- • JS/Exploit-Blacole
- • JS/Wonka
- • PWS-Zbot.gen.oj
Changes for v12.1.0.618 - v12.1.0.622
- New Detections:
- JS/Exploit-Blacole.mj
- Enhanced Detections:
- Adware-SaveShare
- JS/Exploit-Blacole.mc
- PWS-ZBot.gen.auh
- PWS-ZBot.gen.auj
- PWS-Zbot.gen.oj
- VBObfus.g
- VBS/Autorun.worm.k
Changes for v12.0.0.612 - v12.1.0.618
- Enhanced Detections:
- Adware-DomaIQ
- Exploit-CVE2012-0158
- FakeAlert-DZ
- FakeAlert-SecurityTool
- JS/Exploit-Blacole.mh
- JS/Exploit-Blacole.mi
- JV/Exploit-Blacole.t
- Tool-ProcKill
Changes for v12.0.0.609 - v12.0.0.612
- New Detections:
- Adware-SaveShare
- BrainInstall
- JS/Exploit-Blacole.mi
- Enhanced Detections:
- BackDoor-FHI
- Exploit-CVE2012-0158
- Exploit-PDF.sb.gen
- FakeAlert-FRM
- FakeAlert-SecurityTool
- FakeAlert-SecurityTool.bt
- FakeAlert-SecurityTool.v
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.kg
- PWS-ZBot.gen.auh
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
- Vundo.gen.cg
- W32/Autorun.worm.c
- W32/Autorun.worm.dq
- W32/Autorun.worm.h
- ZeroAccess.cj
Changes for v12.0.0.608 - v12.0.0.609
- New Detections:
- Adware-SaveShare
- BrainInstall
- Enhanced Detections:
- BackDoor-FHI
- Exploit-PDF.sb.gen
- FakeAlert-FRM
- FakeAlert-SecurityTool
- PWS-ZBot.gen.aux
- PWS-Zbot.gen.oj
- Vundo.gen.cg
- W32/Autorun.worm.dq
- W32/Autorun.worm.h
Changes for v12.0.0.606 - v12.0.0.608
- New Detections:
- Ividi
- Enhanced Detections:
- BackDoor-FHI
- FakeAlert-SecurityTool
- FakeAlert-WinwebSecurity
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- PWS-ZBot.gen.aux
- PWS-ZBot.gen.auy
- PWS-Zbot.gen.oj
- ZeroAccess
Changes for v12.0.0.603 - v12.0.0.606
- Enhanced Detections:
- Generic Downloader.z
- PWS-Zbot.gen.oj
Changes for v12.0.0.600 - v12.0.0.603
- New Detections:
- GameEnix
- Iwin
- Joke-ArchSMS.f
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Generic Downloader.z
- JS/Exploit-Blacole.mh
- W32/Autorun.worm.c
- W32/Autorun.worm.gt
- W32/Rimecud.gen.de
- ZeroAccess!cfg
Changes for v12.0.0.595 - v12.0.0.600
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • FakeAlert-IN
- • FakeAlert-SecurityTool
- • JS/Exploit-Blacole!heur
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.mf
- • JS/Exploit-Blacole.mg
- • PWS-ZBot.gen.aux
- • PWS-Zbot.gen.oj
- • W32/Polip!mem
Changes for v12.0.0.594 - v12.0.0.595
- New Detections:
- • PWS-ZBot.gen.auy
- • Ransom-FAC!lnk
- • Ransom-FAD
- • Ransom-FAE
- • Ransom-FAF
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • FakeAlert-FRM
Changes for v12.0.0.593 - v12.0.0.594
- New Detections:
- • Maxiget
- • UltraDownload
- Enhanced Detections:
- • Adware-DomaIQ
- • Exploit-CVE2012-0158
- • FakeAlert-C
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • JS/Exploit-Blacole.gc
- • JS/Exploit-Blacole.ht
- • Linkun
- • PWS-ZBot.gen.aux
- • VBS/Autorun.worm.k
Changes for v12.0.0.589 - v12.0.0.593
- New Detections:
- Adware-Hebogo
- Enhanced Detections:
- FakeAlert-SecurityTool
Changes for v12.0.0.587 - v12.0.0.589
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- FakeAlert-SecurityTool
- PWS-Zbot.gen.oj
- VBS/Autorun.worm.k
- W32/Autorun.worm.c
- ZeroAccess
Changes for v12.0.0.585 - v12.0.0.587
- New Detections:
- Linkun
- Enhanced Detections:
- FakeAlert-SecurityTool
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.lq
- JS/Exploit-Blacole.me
- Medfos.e
- ZeroAccess
Changes for v12.0.0.583 - v12.0.0.585
- New Detections:
- Exploit-PDF.sb.gen
- JS/Exploit-Blacole.mh
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Exploit-PDF.rt.gen
- Exploit-PDF.ru.gen
- Exploit-PDF.rv.gen
- Exploit-PDF.rw.gen
- Exploit-PDF.rx.gen
- Exploit-PDF.ry.gen
- Exploit-PDF.rz.gen
- Exploit-PDF.sa.gen
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- PWS-Zbot.gen.oj
- W32/Autorun.worm.f
Changes for v12.0.0.575 - v12.0.0.583
- New Detections:
- JS/Exploit-Blacole.mg
- Tool-ProcKill
- Enhanced Detections:
- FakeAlert-SecurityTool
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- PWS-ZBot.gen.auw
- PWS-Zbot.gen.oc
- PWS-Zbot.gen.oj
- W32/Autorun.worm.aabp
- W32/Expiro.gen.o
- W64/Expiro
Changes for v12.0.0.573 - v12.0.0.575
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- Generic FakeAlert
- Generic FakeAlert.bw
- JS/Exploit-Blacole.ht
- PWS-Zbot.gen.oj
Changes for v12.0.0.572 - v12.0.0.573
- New Detections:
- FakeAlert-FRM
- JS/Exploit-Blacole.me
- Enhanced Detections:
- Exploit-CVE2011-3544
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit!JNLP.c
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.lq
- ZeroAccess!cfg
Changes for v12.0.0.569 - v12.0.0.572
- Enhanced Detections:
- Generic Downloader.z
- PWS-ZBot.gen.auv
- ZeroAccess!cfg
Changes for v12.0.0.568 - v12.0.0.569
- Enhanced Detections:
- Exploit-CVE2012-0158
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit!JNLP
- Medfos.e
- PWS-Zbot
- PWS-Zbot.gen.oj
- W32/Autorun.worm.aaet!lnk
- W32/Autorun.worm.c
- W32/Rimecud
Changes for v12.0.0.559 - v12.0.0.568
- New Detections:
- Adware-iBryte
- Exploit-PDF.rw.gen
- Exploit-PDF.rx.gen
- Exploit-PDF.ry.gen
- Exploit-PDF.rz.gen
- Exploit-PDF.sa.gen
- Enhanced Detections:
- FakeAlert-SecurityTool
- JS/Exploit!JNLP.c
- JS/Exploit-Blacole!heur
- PWS-Zbot
- PWS-Zbot.gen.oj
- W32/Autorun.worm.c
- W32/Autorun.worm.i
- ZeroAccess
Changes for 12.0.0.556 - v12.0.0.559
- Exploit-PDF.rt.gen
- Exploit-PDF.ru.gen
- Exploit-PDF.rv.gen
- JS/Exploit-Blacole.mc
- JS/Exploit-Blacole.md
- Enhanced Detections:
- Downloader-CJX.gen.g
- Generic Downloader.z
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- PWS-ZBot.gen.aul
- PWS-ZBot.gen.aut
- PWS-Zbot.gen.oj
- W32/Autorun.worm.h
- ZeroAccess
Changes for v12.0.0.553 - 12.0.0.556
- New Detections:
- PWS-ZBot.gen.auw
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole!heur
- PWS-ZBot.gen.aut
- W32/Autorun
- W32/Autorun.worm.bbj
Changes for v12.0.0.547 - v12.0.0.553
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • JS/Blacole-Redirect.u
- • JS/Exploit!JNLP
- • JS/Exploit!JNLP.c
Changes for v12.0.0.546 - v12.0.0.547
- Enhanced Detections:
- FakeAlert-SecurityTool
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.ht
Changes for v12.0.0.545 - v12.0.0.546
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- FakeAlert-SecurityTool
- JS/Exploit-Blacole!heur
- Medfos.e
- W32/Autorun.worm.c
Changes for v12.0.0.543 - v12.0.0.545
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • FakeAlert-SecurityTool
- • JS/Exploit-Blacole!heur
- • Medfos.e
- • W32/Autorun.worm.c
Changes for v12.0.0.541 - v12.0.0.543
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- Generic VB.jb
- JS/Exploit!JNLP.c
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.mb
- Medfos.e
- PWS-ZBot.gen.auk
Changes for v12.0.0.539 - v12.0.0.541
- New Detections:
- • PWS-ZBot.gen.auv
- • W32/Autorun.worm.aaet!lnk
- Enhanced Detections:
- • Downloader-BMN.gen.c
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • PWS-ZBot.gen.auh
- • W32/Autorun.worm.aaet
- • W32/Autorun.worm.c
Changes for v12.0.0.538 - v12.0.0.539
- Enhanced Detections:
- • Downloader-BMN.gen.c
- • FakeAlert-SecurityTool
- • PWS-Zbot.gen.oj
Changes for v12.0.0.537 - v12.0.0.538
- Enhanced Detections:
- • Generic Downloader.z
- • JS/Exploit-Blacole.gc
- • JS/Exploit-Blacole.gl
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.lq
- • JS/Exploit-Blacole.mb
- • PWS-Zbot.gen.oj
Changes for v12.0.0.535 - v12.0.0.537
- Enhanced Detections:
- • Exploit-CVE2012-0507
- • FakeAlert-AB!htm
- • JS/Exploit-Blacole.eu
- • PWS-ZBot.gen.aut
- • W32/Autorun.worm.c
Changes for v12.0.0.531 - v12.0.0.535
- New Detections:
- • PWS-ZBot.gen.aut
- Enhanced Detections:
- • FakeAlert-SecurityTool
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.gc
- • JS/Exploit-Blacole.hu
Changes for v12.0.0.530 - v12.0.0.531
- Enhanced Detections:
- FakeAlert-SecurityTool
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.mb
- PWS-ZBot.gen.auq
- PWS-Zbot.gen.oj
- VBS/Autorun.worm.k
- W32/Autorun.worm.c
- ZeroAccess!cfg
Changes for v12.0.0.529 - v12.0.0.530
- New Detections:
- JS/Exploit-Blacole.mb
- Enhanced Detections:
- Exploit-CVE2012-0158
- JS/Exploit!JNLP.h
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.gl
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.lq
- ZeroAccess!cfg
Changes for v12.0.0.523 - v12.0.0.524
- Enhanced Detections:
- Exploit-CVE2012-0158.j!rtf
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.hu
- JS/Exploit-Blacole.ko
- JS/Exploit-Blacole.lz
- PWS-OnlineGames.lw
- PWS-ZBot.gen.aul
- PWS-ZBot.gen.aun
- PWS-ZBot.gen.auo
- PWS-ZBot.gen.aup
- PWS-Zbot.gen.oj
- Swrort.d
Changes for v12.0.0.521 - v12.0.0.523
- Enhanced Detections:
- Downloader-BCS
- Exploit-CVE2012-0158
- FakeAlert-SecurityTool
- FakeAlert-XPA!env
- FakeAlert-Y
- Generic Downloader.z
- Medfos.e
- PWS-Zbot
- PWS-Zbot.gen.oj
- W32/Autorun.worm.bf
- W32/Autorun.worm.c
- W64/Expiro
- ZeroAccess.cj
Changes for v12.0.0.514 - v12.0.0.521
- New Detections:
- JS/Exploit!JNLP.h
- Enhanced Detections:
- Exploit-CVE2010-0188
- Generic FakeAlert
- JS/Exploit!JNLP.f
- JS/Exploit!JNLP.g
- JS/Exploit-Blacole!heur
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
- ZeroAccess!cfg
Changes for v12.0.0.513 - v12.0.0.514
- Enhanced Detections:
- • Generic Downloader.z
- • Generic FakeAlert
- • JS/Exploit-Blacole.is
- • PWS-Zbot
- • ZeroAccess!cfg
- • ZeroAccess.ia
Changes for v12.0.0.512 - v12.0.0.513
- New Detections:
- Exploit-CVE2012-0158.j!rtf
- PWS-ZBot.gen.auq
- Enhanced Detections:
- DNSChanger.d
- JS/Blacole-Exploit
- JS/Exploit!JNLP.c
- JS/Exploit!JNLP.f
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ia
- JS/Exploit-Blacole.ma
- PWS-ZBot.gen.aul
- PWS-ZBot.gen.aum
- PWS-ZBot.gen.auo
Changes for v12.0.0.508 - v12.0.0.512
- New Detections:
- • PWS-ZBot.gen.aup
- Enhanced Detections:
- • Generic Downloader.z
- • ZeroAccess!cfg
Changes for v12.0.0.506 - v12.0.0.508
- New Detections:
- • PWS-ZBot.gen.aun
- • PWS-ZBot.gen.auo
- Enhanced Detections:
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • W32/Autorun.worm.c
Changes for v12.2.0.504 - v12.0.0.506
- Enhanced Detections:
- • Generic Downloader.z
- • Generic FakeAlert
- • Generic FakeAlert.bw
- • JS/Blacole-Redirect.ag
- • W32/Virut
Changes for v12.0.0.503 - v12.2.0.504
- New Detections:
- JS/Exploit!JNLP.g
- Enhanced Detections:
- Exploit-CVE2012-0158
- Generic Downloader.z
- Generic FakeAlert.bw
- JS/Exploit!JNLP.f
- PWS-ZBot.gen.auh
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
- W32/Autorun.worm.g
- W32/Virut
- ZeroAccess
Changes for v12.0.0.501 - v12.0.0.503
- New Detections:
- • PWS-ZBot.gen.aum
- Enhanced Detections:
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • Generic Downloader.ic
- • W64/Expiro
Changes for v12.0.0.499 - v12.0.0.501
- New Detections:
- • JS/Exploit-Blacole.ma
- Enhanced Detections:
- • Generic Downloader.z
- • Generic FakeAlert.bw
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.hu
- • JS/Exploit-Blacole.ia
- • JS/Exploit-Blacole.is
- • JS/Exploit-Blacole.ko
- • JS/Exploit-Blacole.lz
- • PWS-Zbot.gen.oj
- • W32/Expiro.gen.o
Changes for v12.0.0.498 - v12.0.0.499
- Enhanced Detections:
- • Adware-Bprotect
- • Exploit-CVE2012-0158!rtf
- • FakeAlert-Rena.bu
- • Generic Downloader.z
- • JS/Exploit!JNLP.c
- • PWS-Zbot
- • ZeroAccess.c
Changes for v12.0.0.497 - v12.0.0.498
- New Detections:
- JS/Blacole-Redirect.aj
- Enhanced Detections:
- Exploit-CVE2010-2568
- FakeAlert-SecurityTool.gf
- FakeAlert-WinwebSecurity
- Generic Downloader.z
- JS/Exploit!JNLP.f
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ko
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lz
- PWS-ZBot.gen.aul
- PWS-Zbot
- PWS-Zbot.gen.oc
Changes for v12.0.0.493 - v12.0.0.497
- New Detections:
- Adware-InstallQ
- Enhanced Detections:
- Exploit-CVE2012-0158
- FakeAlert-SecurityTool
- Generic Downloader.z
- Medfos.e
- PWS-ZBot.gen.auj
- PWS-ZBot.gen.auk
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
- ZeroAccess.eh
- ZeroAccess.ia
Changes for v12.0.0.490 - v12.0.0.493
- New Detections:
- Adware-InstallQ
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- ZeroAccess.eh
Changes for v12.0.0.487 - v12.0.0.490
- New Detections:
- JS/Exploit-Blacole.lz
- Enhanced Detections:
- Exploit-PDF.b.gen
- Generic Downloader.z
- Generic FakeAlert.cp
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.hu
- JS/Exploit-Blacole.ju
- JS/Exploit-Blacole.ko
- PWS-ZBot.gen.aul
- PWS-Zbot.gen.oj
- W32/Autorun.worm.h
- ZeroAccess!cfg
Changes for v12.0.0.485 - v12.0.0.487
- New Detections:
- • PWS-ZBot.gen.aul
- Enhanced Detections:
- • JS/Exploit-Blacole!heur
- • W64/Expiro
- • ZeroAccess
Changes for v12.0.0.483 - v12.0.0.485
- New Detections:
- • PWS-ZBot.gen.auj
- • PWS-ZBot.gen.auk
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • FakeAlert-SecurityTool
Changes for v12.0.0.482 - v12.0.0.483
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • Exploit-CVE2012-0158!rtf
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • FakeAlert-SecurityTool.fx
- • Generic Downloader.z
- • JS/Exploit!JNLP.f
- • JS/Wonka
- • PWS-Zbot.gen.oj
- • ZeroAccess!cfg
Changes for v12.0.0.478 - v12.0.0.482
- Enhanced Detections:
- • JS/Exploit!JNLP.f
- • JS/Exploit-Blacole.cw
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.gc
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.hu
- • JS/Exploit-Blacole.ju
- • Medfos.e
- • W32/Autorun.worm.c
Changes for v12.0.0.473 - v12.0.0.478
- New Detections:
- • Linux/Backdoor-Appmod.a
- Enhanced Detections:
- • JS/Exploit-Blacole!heur
- • Medfos.e
- • PWS-Zbot
- • PWS-Zbot.gen.oj
Changes for v11.0.0.466 - v12.0.0.473
- Enhanced Detections:
- • Generic Downloader.z
Changes for v11.0.0.465 - v11.0.0.466
- Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit!JNLP.e
- VBS/Autorun.worm.k
- W32/Autorun.worm.c
Changes for v11.0.0.462 - v11.0.0.465
- New Detections:
- • JS/Exploit!JNLP.f
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • JS/Exploit!JNLP
- • PWS-Zbot
- • W32/Autorun.worm.c
- • W32/Autorun.worm.h
- • W32/Rimecud
- • ZeroAccess.cj
- • ZeroAccess.dr
Changes for v11.0.0.456 - v11.0.0.462
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • JS/Exploit-Blacole.cw
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.ht
- • PWS-Zbot.gen.ary
- • PWS-Zbot.gen.oj
- • W64/Expiro
Changes for v11.0.0.454 - v11.0.0.456
- Enhanced Detections:
- • Generic FakeAlert.bw
- • PWS-Zbot.gen.oc
- • W32/Rimecud
Changes for v11.0.0.452 - v11.0.0.454
- Enhanced Detections:
- • Exploit-CVE2012-0158.i!rtf
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • Generic FakeAlert.fz
- • PWS-Zbot
- • Vundo
- • W32/Autorun.worm.c
- • W64/Expiro
Changes for v11.0.0.450 - v11.0.0.452
- Enhanced Detections:
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • Generic VB.jb
- • HackTool-ZBotBuilder
- • PWS-Zbot.gen.oj
- • W32/Autorun.worm.c
- • W32/Autorun.worm.eu
Changes for v11.0.0.446 - v11.0.0.450
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • FakeAlert-SecurityTool
- • Generic VB.jb
- • JS/Exploit!JNLP.c
- • PWS-Zbot.gen.oj
- • ZeroAccess.dr
Changes for v11.0.0.441 - v11.0.0.446
- Enhanced Detections:
- • Generic Downloader.z
- • Generic FakeAlert.bw
- • Generic VB.jb
- • JS/Exploit!JNLP.c
- • PWS-OnlineGames.a
- • PWS-Zbot.gen.oc
- • PWS-Zbot.gen.oj
- • ZeroAccess.eh
- • ZeroAccess.gh
Changes for v11.0.0.393 - v11.0.0.441
- New Detections:
- • JS/Exploit!JNLP.e
- • W32/Expiro.gen.o
- • W64/Expiro
- Enhanced Detections:
- • Exploit-CVE2012-0158.h!rtf
- • Generic Downloader.z
- • Generic VB.jb
- • JS/Exploit!JNLP.c
- • JS/Exploit-Blacole.le
Changes for v11.0.0.390 - v11.0.0.393
- New Detections:
- • Toolbar-Browser
- Enhanced Detections:
- • Generic FakeAlert.bw
- • JS/Exploit-Blacole!heur
- • PWS-Zbot
- • PWS-Zbot.gen.ahr
- • PWS-Zbot.gen.amz
- • PWS-Zbot.gen.oj
- • W32/Autorun.worm.g
- • W32/Autorun.worm.hm
Changes for v11.0.0.388 - v11.0.0.390
- New Detections:
- • Gapz.a
- • W64/Gapz.a
- Enhanced Detections:
- • JS/Blacole-Redirect.ag
- • JS/Exploit!JNLP.c
- • JS/Exploit-Blacole!heur
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.ip
- • JV/Exploit-Blacole.t
- • PWS-ZBot.gen.aug
- • PWS-Zbot.gen.oj
- • W32/Autorun.worm.c
- • ZeroAccess
Changes for v11.0.0.384 - v11.0.0.388
- New Detections:
- • JS/Exploit!JNLP.c
- • PWS-ZBot.gen.auh
- • PWS-ZBot.gen.aui
- Enhanced Detections:
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • JS/Blacole-Redirect.ag
- • JS/Exploit-Blacole
- • JS/Exploit-Blacole!heur
- • PWS-Zbot.gen.ary
- • ZeroAccess.ia
Changes for v11.0.0.382 - v11.0.0.384
- New Detections:
- • JS/Exploit-Blacole.b!heur
- • JS/Exploit-Blacole.lw
- • JS/Exploit-Blacole.lx
- • JS/Exploit-Blacole.ly
- Enhanced Detections:
- • Exploit-PDF.ca
- • FakeAlert-SecurityTool
- • Generic FakeAlert
- • PWS-Zbot.gen.oc
- • PWS-Zbot.gen.oj
Changes for v11.0.0.378 - v11.0.0.382
- Enhanced Detections:
- • FakeAlert-SecurityTool
- • FakeAlert-SecurityTool.gf
- • JS/Exploit-Blacole
Changes for v11.0.0.372 - v11.0.0.378
- Enhanced Detections:
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • JS/Exploit-Blacole
- • JS/Redirector
- • PWS-Zbot
- • PWS-Zbot.gen.oj
- • ZeroAccess
Changes for v11.0.0.369 - v11.0.0.372
- Enhanced Detections:
- • FakeAlert-Rena.bu
- • FakeAlert-Rena.c!mem
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • JS/Exploit-Blacole!heur
- • JS/Exploit-Blacole.a!heur
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.im
Changes for v11.0.0.366 - v11.0.0.369
- Enhanced Detections:
- • Generic VB.jb
- • JS/Exploit-Blacole!heur
- • W32/Autorun.worm.aaeh
Changes for v11.0.0.362 - v11.0.0.366
- Enhanced Detections:
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • Festi.c
- • Generic Downloader.z
- • JS/Exploit!JNLP.a
- • JS/Exploit-Blacole!heur
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.lv
- • PWS-Zbot.gen.oj
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.c
Changes for v11.0.0.360 - v11.0.0.362
- Enhanced Detections:
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • JS/Exploit-Blacole!heur
- • JS/Exploit-Blacole.a!heur
- • JS/Exploit-Blacole.le
- • PWS-OnlineGames.a
- • PWS-Zbot.gen.oj
- • W32/Autorun.worm.g
- • W32/Conficker.worm
Changes for v11.0.0.357 - v11.0.0.360
- Enhanced Detections:
- • Downloader-CJX.gen.aa
- • Downloader-CJX.gen.ab
- • Downloader-CJX.gen.ac
- • Downloader-CJX.gen.s
- • Downloader-CJX.gen.t
- • Downloader-CJX.gen.z
- • FakeAlert-AB
- • FakeAlert-Rena.bu
- • FakeAlert-Rena.gen!env
- • Generic PWS.ahp
- • JS/Exploit!JNLP.a
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.im
- • JS/Exploit-Blacole.le
- • JS/Exploit-Blacole.lr
- • JS/Exploit-Blacole.lt
- • JS/Exploit-Blacole.lu
- • PWS-Zbot.gen.asm
- • Vundo
- • W32/Autorun.worm.h
Changes for v11.0.0.355 - v11.0.0.357
- Enhanced Detections:
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • JV/Exploit-Blacole
- • Medfos.e
- • PWS-Zbot.gen.vo
Changes for v11.0.0.344 - v11.0.0.355
- New Detections:
- • JS/Exploit-Blacole.lv
- • PWS-Zbot.gen.oj
- Enhanced Detections:
- • BackDoor-BAC
- • BackDoor-CSX
- • BackDoor-CSY
- • BackDoor-CUX
- • BackDoor-CWD
- • BackDoor-DIX
- • Backdoor-BAC
- • Backdoor-DSN
- • Downloader-BAI
- • FakeAlert-Rena.bu
- • Festi
- • Generic RootKit.a
- • Generic RootKit.f
- • Generic Rootkit.d
- • HideVault!sys
- • JS/Blacole-Redirect.ag
- • JS/Exploit-Blacole.eu
- • NTRootKit-J
- • NTRootkit-Z
- • PWS-Zbot.gen.asm
- • Spy-Agent.bv
- • Srizbi
- • StartPage-KM
- • VAnti
- • W32/Almanahe
- • W32/Nuwar
Changes for v11.0.0.341 - v11.0.0.344
- Enhanced Detections:
- • Generic FakeAlert
- • JS/Exploit-Blacole!heur
- • JS/Exploit-Blacole.lr
- • JS/Exploit-Blacole.lt
- • W32/XDoc
Changes for v11.0.0.338 - v11.0.0.341
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • Generic Downloader.z
- • JS/Exploit-Blacole.a!heur
Changes for v11.0.0.337 - v11.0.0.338
- New Detections:
- • JS/Blacole-Redirect.ah
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • Generic FakeAlert.bw
- • PWS-TravNet
Changes for v11.0.0.333 - v11.0.0.337
- Enhanced Detections:
- • FakeAlert-Rena.bu
Changes for v11.0.0.332 - v11.0.0.333
- New Detections:
- • PWS-TravNet
- Enhanced Detections:
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • Generic FakeAlert
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.c
Changes for v11.0.0.327 - v11.0.0.332
- Enhanced Detections:
- •BackDoor-FHI
- •FakeAlert-EQ.c
- •FakeAlert-Rena.bu
- •FakeAlert-SecurityTool
- •Generic Downloader.z
- •JS/Exploit-Blacole!heur
- •JS/Exploit-Blacole.a!heur
Changes for v11.0.0.325 - v11.0.0.327
- Enhanced Detections:
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • JS/Blacole-Redirect.ae
- • PWS-Zbot
- • W32/Rimecud
- • W64/TDSS.d
- • ZeroAccess
Changes for v11.0.0.323 - v11.0.0.325
- Enhanced Detections:
- • BackDoor-EXZ
- • BackDoor-FHI
- • Downloader-FMJ
- • Exploit-CVE2011-2462
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • PWS-OnlineGames.a
- • PWS-ZBot.gen.aug
- • W32/Autorun.worm.aaeh
Changes for v11.0.0.319 - v11.0.0.323
- New Detections:
- • JS/Exploit!JNLP
- Enhanced Detections:
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • Generic FakeAlert
- • PWS-Zbot
Changes for v11.0.0.318 - v11.0.0.319
- Enhanced Detections:
- • FakeAlert-Rena.bu
- • FakeAlert-SecurityTool
- • JS/Exploit-Blacole.aq
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.lr
- • JS/Exploit-Blacole.lt
- • PWS-OnlineGames.a
- • PWS-Zbot.gen.acl
- • PWS-Zbot.gen.asl
- • ZeroAccess
Changes for v11.0.0.315 - v11.0.0.318
- New Detections:
- • W32/XDoc
- Enhanced Detections:
- • Generic FakeAlert
- • Generic FakeAlert.bw
- • Generic VB.jb
- • JS/Exploit-Blacole
- • JS/Exploit-Blacole!heur
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.ld
- • JS/Exploit-Blacole.le
- • JS/Exploit-Blacole.lr
- • PWS-Zbot.gen.ary
- • VBS/Autorun.worm.aaaz
- • ZeroAccess
Changes for v11.0.0.312 - v11.0.0.315
- New Detections:
- • Exploit-CVE2012-0158.i!rtf
- • JS/Exploit-Blacole.lu
- • PWS-ZBot.gen.aug
- Enhanced Detections:
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • JS/Blacole-Redirect.af
- • JS/Blacole-Redirect.ag
- • JS/Exploit-Blacole
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.ld
- • PWS-Zbot.gen.acl
- • VBS/Autorun.worm.k
- • ZeroAccess
Changes for v11.0.0.310 - v11.0.0.312
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.lr
- JS/Exploit-Blacole.ls
- PWS-Zbot.gen.agz
- PWS-Zbot.gen.aok
- PWS-Zbot.gen.arw
- W32/Rimecud
- ZeroAccess
Changes for v11.0.0.308 - v11.0.0.310
- Enhanced Detections:
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- Generic FakeAlert.bw
- JS/Blacole-Redirect.ac
- JS/Blacole-Redirect.ad
- JS/Blacole-Redirect.ae
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.lr
- JS/Exploit-Blacole.lt
- W32/Autorun.worm.c
- ZeroAccess
Changes for v11.0.0.305 - v11.0.0.308
- New Detections:
- JS/Blacole-Redirect.af
- JS/Blacole-Redirect.ag
- JS/Exploit-Blacole.lt
- W64/TDSS.d
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Blacole-Redirect.ab
- JS/Exploit-Blacole.aq
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lr
- JV/Exploit-Blacole.t
- ZeroAccess
Changes for v11.0.0.303 - v11.0.0.305
- Enhanced Detections:
- FakeAlert-Rena.bu
- Generic Downloader.z
- JS/Exploit-Blacole.jn
- Vundo
- ZeroAccess
Changes for v11.0.0.301 - v11.0.0.303
- Enhanced Detections:
- •BackDoor-FHI
- •FakeAlert-EQ.c
- •FakeAlert-Rena.bu
- •FakeAlert-SecurityTool
- •Generic FakeAlert
- •JS/Exploit-Blacole.ht
- •PWS-Zbot.gen.atp
- •VBS/Autorun.worm.k
- •ZeroAccess
Changes for v11.0.0.299 - v11.0.0.301
- New Detections:
- Downloader-FKW
- Downloader-FMA
- Downloader-FMB
- Downloader-FMJ
- JS/Blacole-Redirect.ac
- JS/Blacole-Redirect.ad
- JS/Blacole-Redirect.ae
- Enhanced Detections:
- FakeAlert-Rena.bu
- Generic FakeAlert.bw
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ju
- JV/Exploit-Blacole
- PWS-Zbot
- W32/Xpaj.c
- ZeroAccess
Changes for v11.0.0.296 - v11.0.0.299
- New Detections:
- JS/Exploit-Blacole.lr
- JS/Exploit-Blacole.ls
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- FakeAlert-Rena.bu
- FakeAlert-SecurityTool
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ld
- ZeroAccess
Changes for v11.0.0.293 - v11.0.0.296
- New Detections:
- JS/Blacole-Redirect.ab
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Exploit-MSExcel.k
- FakeAlert-MY.gen
- Generic Downloader.z
- JS/Exploit-Blacole
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lq
- W64/TDSS.f
- ZeroAccess
Changes for v11.0.0.289 - v11.0.0.293
- Enhanced Detections:
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit-Blacole.lp
- PWS-Zbot.gen.ary
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.c
- ZeroAccess
Changes for v11.0.0.288 - v11.0.0.289
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Exploit-MSExcel.k
- JS/Exploit-Blacole
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ju
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.le
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.c
- W32/Autorun.worm.g
Changes for v11.0.0.286 - v11.0.0.288
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit-Blacole.le
- PWS-Zbot.gen.ary
Changes for v11.0.0.285 - v11.0.0.286
- Enhanced Detections:
- Exploit-CVE2011-2462
- Exploit-CVE2012-0158!rtf
- Exploit-CVE2012-0507
- FakeAlert-SecurityTool
- Generic Downloader.z
- JS/Exploit-Blacole.lo
- PWS-Zbot.gen.asm
- W32/Autorun.worm.aaeh
- ZeroAccess
Changes for v11.0.0.282 - v11.0.0.285
- Enhanced Detections:
- Generic.it
- JS/Blacole-Redirect
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.im
- JS/Exploit-Blacole.le
- W32/Autorun.worm.c
Changes for v11.0.0.278 - v11.0.0.282
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ld
- PWS-Zbot.gen.ary
- W32/Autorun.worm.bx
- W32/Autorun.worm.c
- W32/Autorun.worm.g
Changes for v11.0.0.276 - v11.0.0.278
- New Detections:
- PWS-OnlineGames.a
- Enhanced Detections:
- PWS-OnlineGames.a
- PWS-Zbot.gen.ary
- W32/Sdbot.worm
- ZeroAccess.dr
Changes for v11.0.0.267 - v11.0.0.276
- New Detections:
- JS/Exploit-Blacole!heur
- JS/Exploit-Blacole.lq
- Enhanced Detections:
- Generic Downloader.z
- Generic VB.jb
- JS/Exploit-Blacole
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.le
- PWS-Zbot
- PWS-Zbot.gen.arw
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.g
- W32/Autorun.worm.gt
- ZeroAccess.cj
Changes for v11.0.0.250 - v11.0.0.266
- New Detections:
- • Festi.c
- Enhanced Detections:
- • Generic Downloader.z
- • Generic FakeAlert
- • JS/Blacole-Redirect.aa
- • JV/Exploit-Blacole
- • PWS-Zbot
- • PWS-Zbot.gen.arw
- • W32/Autorun.worm.aaeh
- • ZeroAccess.ik
Changes for v11.0.0.249 - v11.0.0.250
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- Exploit-CVE2012-0158.h!rtf
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ks
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lm
- JS/Exploit-Blacole.ln
- Medfos.e
- Vundo
- W32/Autorun.worm.aaeh
- ZeroAccess
- ZeroAccess.ij
Changes for v11.0.0.248 - v11.0.0.249
- New Detections:
- JS/Blacole-Redirect.aa
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- FakeAlert-SecurityTool
- PWS-Zbot.gen.arw
- Vundo
- W32/Autorun.worm.aaeh
- W32/Rimecud
- ZeroAccess
Changes for v11.0.0.244 - v11.0.0.248
- Enhanced Detections:
- • FakeAlert-SecurityTool
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.le
- • PWS-Zbot.gen.arw
- • W32/Conficker.worm!job
- • ZeroAccess
- • ZeroAccess.hr
Changes for v11.0.0.239 - v11.0.0.244
- Enhanced Detections:
- • Generic FakeAlert
- • JS/Blacole-Redirect.z
- • JS/Exploit-Blacole
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.le
- • JS/Exploit-Blacole.lf
- • JS/Exploit-Blacole.lj
- • JS/Exploit-Blacole.lk
- • JS/Exploit-Blacole.ll
- • PWS-Zbot
- • PWS-Zbot.gen.aov
- • PWS-Zbot.gen.arw
- • PWS-Zbot.gen.ary
- • ZeroAccess
- • ZeroAccess.dr
Changes for v11.0.0.234 - v11.0.0.239
- Enhanced Detections:
- Generic BackDoor.zw
- JV/Exploit-Blacole
- PWS-Zbot.gen.arw
- PWS-Zbot.gen.atp
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.c
- W32/Rimecud
- W32/XDocCrypt.d
- ZeroAccess
Changes for v11.0.0.233 - v11.0.0.234
- New Detections:
- JS/Exploit-Blacole.ln
- W32/XDocCrypt.d
- ZeroAccess.ij
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Generic Downloader.z
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ks
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lm
- Medfos.e
- W32/Virut
- ZeroAccess
Changes for v11.0.0.228 - v11.0.0.233
- Enhanced Detections:
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.le
- PWS-Zbot.gen.arw
- ZeroAccess
- ZeroAccess.hr
- ZeroAccess.ii
Changes for v11.0.0.227 - v11.0.0.228
- Enhanced Detections:
- Exploit-CVE2011-1990
- Generic Downloader.z
- Generic FakeAlert
- JS/Exploit-Blacole
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lf
- PWS-Zbot.gen.arw
- W32/Autorun.worm.aaeh
- ZeroAccess
Changes for v11.0.0.226 - v11.0.0.227
- New Detections:
- JS/Exploit-Blacole.lm
- Enhanced Detections:
- Exploit-CVE2012-0158!rtf
- Generic BackDoor.zw
- Generic Downloader.z
- Generic FakeAlert.bz!lnk
- JS/Exploit-Blacole
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.lf
- PWS-Zbot.gen.ary
- W32/Autorun.worm.c
- W32/Rimecud
- ZeroAccess
- ZeroAccess.hr
Changes for v11.0.0.224 - v11.0.0.226
- New Detections:
- • ZeroAccess.ii
- Enhanced Detections:
- • FakeAlert-SysDef
- • Generic Downloader.z
- • Generic!atr
- • JS/Exploit-Blacole
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.kh
- • JS/Exploit-Blacole.ld
- • JS/Exploit-Blacole.le
- • PWS-Zbot.gen.any
- • PWS-Zbot.gen.are
- • PWS-Zbot.gen.arw
- • PWS-Zbot.gen.ary
- • PWS-Zbot.gen.aty
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.c
- • W32/Autorun.worm.g
- • W32/Lovgate
- • ZeroAccess
- • ZeroAccess.ig
Changes for v11.0.0.220 - v11.0.0.224
- Enhanced Detections:
- • Generic Downloader.z
- • Generic FakeAlert
- • Generic VB.jb
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.kt
- • PWS-Zbot.gen.any
- • PWS-Zbot.gen.arw
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.g
- • ZeroAccess
- • ZeroAccess.hr
Changes for v11.0.0.216 - v11.0.0.220
- New Detections:
- JS/Exploit-Blacole.ll
- Enhanced Detections:
- Exploit-CVE2012-0158.h!rtf
- FakeAlert-Rena.by
- FakeAlert-Rena.cj
- FakeAlert-SecurityTool.fl
- FakeAlert-SecurityTool.fz
- FakeAlert-SecurityTool.gf
- Generic FakeAlert
- Generic Rootkit.d
- PWS-Zbot
- PWS-Zbot.gen.any
- PWS-Zbot.gen.arw
- W32/Lovgate
- ZeroAccess
- ZeroAccess.hr
- ZeroAccess.ih
Changes for v11.0.0.215 - v11.0.0.216
- New Detections:
- JS/Blacole-Redirect.z
- JS/Exploit-Blacole.lk
- Enhanced Detections:
- Generic Downloader.z
- JS/Exploit-Blacole.kk
- PWS-Zbot.gen.any
- W32/Autorun.worm.aaeh
- W32/Rimecud
Changes for v11.0.0.213 - v11.0.0.215
- New Detections:
- Keylog-FAE
- Enhanced Detections:
- FakeAlert-SecurityTool
- FakeAlert-SecurityTool.fa
- FakeAlert-SecurityTool.fl
- FakeAlert-SecurityTool.fn
- FakeAlert-SecurityTool.ft
- FakeAlert-SecurityTool.ga
- Generic PWS.xa
- PWS-Zbot.gen.any
- PWS-Zbot.gen.arw
- VBS/Autorun.worm.k
- W32/Autorun.worm.c
- W32/Lovgate
- ZeroAccess.dr
- ZeroAccess.ig
Changes for v11.0.0.210 - v11.0.0.213
- New Detections:
- • ZeroAccess.ih
- Enhanced Detections:
- • FakeAlert-Rena.ck
- • FakeAlert-Rena.cm
- • FakeAlert-Rena.cn
- • FakeAlert-Rena.co
- • Generic PWS.aac
- • PWS-Zbot
- • PWS-Zbot.gen.any
- • PWS-Zbot.gen.arw
- • Vundo
- • W32/Autorun.worm.aaeh
- • ZeroAccess
Changes for v11.0.0.209 - v11.0.0.210
- New Detections:
- BackDoor-EJG
- JS/Exploit-Blacole.lj
- ZeroAccess.ig
- Enhanced Detections:
- BackDoor-EJG
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.kf
- JS/Exploit-Blacole.kz
- JS/Exploit-Blacole.la
- JS/Exploit-Blacole.lb
- JS/Exploit-Blacole.lc
- JS/Exploit-Blacole.ld
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lf
- PWS-Fmocx.b
- PWS-OnlineGames.lj
- PWS-Zbot.gen.any
- PWS-Zbot.gen.arw
- PWS-Zbot.gen.ary
- TDSS.ap
- ZeroAccess
- ZeroAccess.dr
- ZeroAccess.hr
Changes for v11.0.0.207 - v11.0.0.209
- New Detections:
- JS/Exploit-Blacole.le
- JS/Exploit-Blacole.lf
- Enhanced Detections:
- Exploit-CVE2011-1990
- False Digisig present
- JS/Exploit-Blacole
- JS/Exploit-Blacole.gg
- JS/Exploit-Blacole.gq
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.ky
- JS/Exploit-Blacole.kz
- JS/Exploit-Blacole.la
- JS/Exploit-Blacole.lb
- JS/Exploit-Blacole.lc
- JS/Exploit-Blacole.ld
- PWS-Zbot.gen.any
- PWS-Zbot.gen.arw
- W32/Autorun.worm.g
- ZeroAccess
Changes for v11.0.0.206 - v11.0.0.207
- Enhanced Detections:
- • Generic Downloader.z
- • Generic FakeAlert.eo
- • JS/Exploit-Blacole.cw
- • JS/Exploit-Blacole.gc
- • PWS-Fmocx.a
- • PWS-Zbot
- • PWS-Zbot.gen.agz
- • PWS-Zbot.gen.any
- • PWS-Zbot.gen.aov
- • PWS-Zbot.gen.arw
- • PWS-Zbot.gen.asm
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.c
- • ZeroAccess
Changes for v11.0.0.204 - v11.0.0.206
- New Detections:
- JS/Exploit-Blacole.ld
- Enhanced Detections:
- Exploit-CVE2011-1990
- FakeAlert-SecurityTool.fl
- FakeAlert-SecurityTool.fx
- FakeAlert-SecurityTool.ga
- Generic Downloader.z
- Generic FakeAlert
- Generic PWS.aac
- JS/Exploit-Blacole
- JS/Exploit-Blacole.em
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.kh
- JS/Exploit-Blacole.kx
- JS/Exploit-Blacole.lc
- JS/Exploit-Blacole.ld
- PWS-DOD.a
- W32/Autorun.worm.c
- ZeroAccess
- ZeroAccess.hr
Changes for v11.0.0.201 - v11.0.0.204
- New Detections:
- • JS/Exploit-Blacole.lc
- Enhanced Detections:
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.gc
- • JS/Exploit-Blacole.gg
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.kt
- • Medfos.e
- • PWS-Zbot
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.c
- • W32/Autorun.worm.h
Changes for v11.0.0.200 - v11.0.0.201
- Enhanced Detections:
- • Exploit-CVE2011-1990
- • Generic Downloader.z
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.ht
- • PWS-Zbot.gen.any
- • PWS-Zbot.gen.ash
- • Vundo
- • W32/Rimecud.gen.bc
- • ZeroAccess
Changes for v11.0.0.199 - v11.0.0.200
- New Detections:
- • JS/Exploit-Blacole.lb
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • FakeAlert-SecurityTool
- • FakeAlert-SecurityTool.hd
- • FakeAlert-SecurityTool.he
- • Generic Downloader.hj
- • Generic Downloader.z
- • JS/Exploit-Blacole
- • JS/Exploit-Blacole.cw
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.gc
- • JS/Exploit-Blacole.gg
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.kf
- • JS/Exploit-Blacole.kz
- • JS/Exploit-Blacole.la
- • PWS-DOD.c
- • PWS-Zbot
- • PWS-Zbot.gen.any
- • PWS-Zbot.gen.arw
- • W32/Autorun.worm.aaeh
- • W32/Conficker.worm
- • ZeroAccess
Changes for v11.0.0.198 - v11.0.0.199
- Enhanced Detections:
- • Exploit-CVE2011-1990
- • Exploit-CVE2012-0158
- • Exploit-CVE2012-0158.h!rtf
- • Generic Downloader.z
- • Generic FakeAlert.gm
- • JS/Exploit-Blacole.em
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.kw
- • JS/Exploit-Blacole.kx
- • PWS-DOD.b
- • PWS-Zbot.gen.any
- • PWS-Zbot.gen.arw
- • PWS-Zbot.gen.ary
- • VBS/Autorun.worm.bfo
- • W32/Autorun.worm.aaeh
- • ZeroAccess
Changes for v11.0.0.197 - v11.0.0.198
- New Detections:
- • Fake-SecTool.gen!lnk
- • JS/Exploit-Blacole.kz
- • JS/Exploit-Blacole.la
- Enhanced Detections:
- • BackDoor-EXI.gen.x
- • JS/Exploit-Blacole.em
- • JS/Exploit-Blacole.eq
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.gc
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.jf
- • JS/Exploit-Blacole.kf
- • JS/Exploit-Blacole.kx
- • JS/IFrame.gen.h
- • Medfos.e
- • PWS-Zbot
- • Vundo
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.c
- • W32/Autorun.worm.g
- • ZeroAccess
- • ZeroAccess.hr
Changes for v11.0.0.196 - v11.0.0.197
- New Detections:
- • FakeAlert-SecurityTool.hd
- • FakeAlert-SecurityTool.he
- • JS/Exploit-Blacole.ky
- Enhanced Detections:
- • Exploit-CVE2012-0507
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • JS/Exploit-Blacole.gg
- • PWS-DOD.d
- • PWS-Zbot.gen.agz
- • PWS-Zbot.gen.aoz
- • PWS-Zbot.gen.arw
- • PWS-Zbot.gen.asb
- • SWF/Exploit-Blacole
- • Swrort.d
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.bdf
- • W32/Autorun.worm.bez!atr
- • W32/Rimecud
- • ZeroAccess
- • ZeroAccess.hr
Changes for v10.2.0.1019 - v11.0.0.196
- Enhanced Detections:
- • DNSChanger.cw
- • Exploit-CVE2012-0507
- • FakeAlert-QU
- • JS/Exploit-Blacole.ko
- • JS/Exploit-Blacole.kt
- • JS/Exploit-Blacole.ku
- • JS/Exploit-Blacole.kv
- • JS/Exploit-Blacole.kw
- • PWS-Zbot
- • PWS-Zbot.gen.arw
- • TDSS.ap
- • W32/Autorun.worm.aaeh
- • W32/DNSChanger.cw
- • ZeroAccess
Changes for v10.2.0.1018 - v10.2.0.1019
- Enhanced Detections:
- • Generic Downloader.z
- • JS/Exploit-Blacole.gq
- • PWS-Zbot.gen.ary
- • W32/Autorun.worm.aaeh
Changes for v10.2.0.1016 - v10.2.0.1018
Changes for v10.2.0.1015 - v10.2.0.1016
- New Detections:
- • Dialer-gen
- • Downloader-AZV
- • Generic Downloader.rz
- • Generic Malware.qd!ats
- • JS/Exploit-Blacole.ko
- • JS/Exploit-Blacole.kw
- • JS/Exploit-Blacole.kx
- • PWS-Zbot.gen.di
- • W32/Alisa
- • W32/Expiro.d
- • W32/Expiro.gen.n
- • W32/Ramnit.a
- • W32/Ramnit.dr
- • W32/Ramnit.n
- • W32/Sivis.gen.a
- Enhanced Detections:
- • Exploit-CVE-2010-2738
- • Exploit-CVE2011-1990
- • Exploit-CVE2011-2462
- • FakeAlert-SecurityTool
- • FakeAlert-SysDef
- • Generic Downloader.z
- • Generic FakeAlert
- • Generic FakeAlert.bw
- • Generic Rootkit.d
- • JS/Blacole-Exploit
- • JS/Blacole-Redirect.u
- • JS/Exploit-Blacole
- • JS/Exploit-Blacole.em
- • JS/Exploit-Blacole.eq
- • JS/Exploit-Blacole.eu
- • JS/Exploit-Blacole.gc
- • JS/Exploit-Blacole.gg
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.jf
- • JS/Exploit-Blacole.kf
- • JS/Exploit-Blacole.kl
- • JS/Exploit-Blacole.km
- • JS/Exploit-Blacole.kn
- • JS/Exploit-Blacole.kp
- • JS/Exploit-Blacole.ks
- • JS/Exploit-Blacole.kt
- • JS/Exploit-Blacole.ku
- • JS/Exploit-Blacole.kv
- • JS/Exploit-Blacole.kw
- • PWS-Zbot
- • PWS-Zbot.gen.arw
- • PWS-Zbot.gen.ary
- • Ramnit.b
- • TDSS.ag
- • TDSS.ap
- • W32/Autorun.worm.aaeh
- • W32/Expiro.gen.n
- • W32/Sality
- • W32/Sality.dr
- • ZeroAccess
- • ZeroAccess.eu
- • ZeroAccess.hr
Changes for v10.2.0.1014 - v10.2.0.1015
- New Detections:
- • JS/Exploit-Blacole.ko
- • JS/Exploit-Blacole.ku
- • JS/Exploit-Blacole.kv
- • JS/Exploit-Blacole.kw
- Enhanced Detections:
- • DNSChanger.cw
- • Exploit-CVE2010-0188
- • Exploit-CVE2011-3544
- • Exploit-CVE2012-0158
- • Exploit-CVE2012-0507
- • Generic Downloader.z
- • Generic FakeAlert.bw
- • JS/Blacole-Exploit
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.kf
- • JS/Exploit-Blacole.kl
- • JS/Exploit-Blacole.km
- • JS/Exploit-Blacole.kn
- • JS/Exploit-Blacole.kp
- • JS/Exploit-Blacole.kt
- • JS/Exploit-Blacole.ku
- • JS/Exploit-Blacole.kv
- • PWS-Zbot.gen.arj
- • PWS-Zbot.gen.arw
- • PWS-Zbot.gen.ary
- • TDSS.ag
- • TDSS.ap
- • W32/Autorun.worm.c
- • W32/DNSChanger.cw
- • ZeroAccess
- • ZeroAccess.eu
- • ZeroAccess.hr
Changes for v10.2.0.1013 - v10.2.0.1014
- New Detections:
- • JS/Exploit-Blacole.kt
- • JS/Exploit-Blacole.ku
- • JS/Exploit-Blacole.kv
- Enhanced Detections:
- • DNSChanger.cw
- • Exploit-CVE2010-0188
- • Exploit-CVE2011-3544
- • Exploit-CVE2012-0158
- • Exploit-CVE2012-0507
- • FakeAlert-SysDef.ay
- • Generic Downloader.z
- • Generic FakeAlert.bw
- • JS/Blacole-Exploit
- • JS/Exploit-Blacole.eq
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.ix
- • JS/Exploit-Blacole.kf
- • JS/Exploit-Blacole.kg
- • JS/Exploit-Blacole.kh
- • JS/Exploit-Blacole.ki
- • JS/Exploit-Blacole.kj
- • JS/Exploit-Blacole.kk
- • JS/Exploit-Blacole.kl
- • PWS-Zbot
- • PWS-Zbot.gen.apc
- • PWS-Zbot.gen.arj
- • PWS-Zbot.gen.arw
- • PWS-Zbot.gen.ary
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.c
- • W32/DNSChanger.cw
- • ZeroAccess
- • ZeroAccess.hr
Changes for v10.2.0.1012 - v10.2.0.1013
- New Detections:
- • JS/Exploit-Blacole.kt
- Enhanced Detections:
- • Exploit-CVE2012-0507
- • FakeAlert-SysDef.ay
- • Generic Downloader.z
- • JS/Blacole-Exploit
- • JS/Exploit-Blacole.eq
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.ix
- • JS/Exploit-Blacole.kg
- • JS/Exploit-Blacole.kh
- • JS/Exploit-Blacole.ki
- • JS/Exploit-Blacole.kj
- • JS/Exploit-Blacole.kk
- • PWS-Zbot
- • PWS-Zbot.gen.apc
- • PWS-Zbot.gen.ary
- • W32/Autorun.worm.aaeh
- • ZeroAccess.hr
Changes for v10.2.0.1010 - v10.2.0.1012
- Enhanced Detections:
- • JS/Exploit-Blacole.kl
- • W32/Autorun.worm.aaeh
Changes for v10.2.0.1009 - v10.2.0.1010
- New Detections:
- • JS/Exploit-Blacole.ko
- • JS/Exploit-Blacole.kr
- • JS/Exploit-Blacole.ks
- • PWS-FAOU
- Enhanced Detections:
- • Exploit-Blacole
- • FakeAlert-SecDefend
- • FakeAlert-SecurityTool
- • FakeAlert-SecurityTool.ev
- • Generic FakeAlert.fz
- • JS/Blacole-Exploit
- • JS/Exploit-Blacole
- • JS/Exploit-Blacole.gg
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.ju
- • JS/Exploit-Blacole.kl
- • JV/Exploit-Blacole.t
- • PWCrack-PWDump
- • PWS-Zbot
- • PWS-Zbot.gen.agy
- • PWS-Zbot.gen.any
- • Vundo
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.bx
- • ZeroAccess
- • ZeroAccess.hr
Changes for v10.2.0.1003 - v10.2.0.1009
- New Detections:
- • JS/Exploit-Blacole.kl
- • JS/Exploit-Blacole.km
- • JS/Exploit-Blacole.kn
- • JS/Exploit-Blacole.kp
- • JS/Exploit-Blacole.kq
- Enhanced Detections:
- • Exploit-PDF.bp.gen
- • PWS-Zbot.gen.any
- • PWS-Zbot.gen.ate
- • PWS-Zbot.gen.atl
- • W32/Autorun.worm.aaeh
- • ZeroAccess
- • ZeroAccess.hr
- • ZeroAccess.ie
- • ZeroAccess.if
Changes for v10.2.0.1002 - v10.2.0.1003
- New Detections:
- • JS/Exploit-Blacole.kk
- Enhanced Detections:
- • FakeAlert-SecurityTool
- • FakeAlert-SysDef.ay
- • Generic FakeAlert
- • HTool-RemoteCmd
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.kf
- • JS/Redirector
- • Medfos.e
- • PWS-Zbot.gen.aru
- • PWS-Zbot.gen.arw
- • PWS-Zbot.gen.ary
- • PWS-Zbot.gen.asl
- • Vundo
- • W32/Autorun.worm.aaeh
- • ZeroAccess
- • ZeroAccess.cj
Changes for v10.2.0.1000 - v10.2.0.1002
- Enhanced Detections:
- • Exploit-PDF
- • Exploit-PDF.i
- • FakeAlert-SecDefend
- • PWS-Zbot
- • PWS-Zbot.gen.agy
- • PWS-Zbot.gen.agz
- • PWS-Zbot.gen.arw
- • Vundo
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.c
Changes for v10.2.0.998 - v10.2.0.1000
- Enhanced Detections:
- • Generic Downloader.z
- • JS/Exploit-Blacole.je
Changes for v10.2.0.997 - v10.2.0.998
- New Detections:
- • FakeAlert-FHG
- • FakeAlert-FHR
- • JS/Exploit-Blacole.kg
- • JS/Exploit-Blacole.kh
- • JS/Exploit-Blacole.ki
- • JS/Exploit-Blacole.kj
- • ZeroAccess.ie
- • ZeroAccess.if
Changes for v10.2.0.996 - v10.2.0.997
- Enhanced Detections:
- • Exploit-CVE2012-0158!rtf
- • Generic Downloader.z
- • Generic FakeAlert
- • JS/Exploit-Blacole.gq
- • Vundo
- • W32/Autorun.worm.aaeh
Changes for v10.2.0.994 - v10.2.0.996
- New Detections:
- • JS/Exploit-Blacole.kf
- Enhanced Detections:
- • Exploit-CVE2012-0507
- • FakeAlert-SecurityTool
- • FakeAlert-SysDef.ay
- • Generic Downloader.z
- • Generic FakeAlert
- • PWS-Zbot.gen.apc
- • PWS-Zbot.gen.atx
- • W32/Autorun.worm.aaeh
- • ZeroAccess.hr
Changes for v10.2.0.933 - v10.2.0.994
- Enhanced Detections:
- • Exploit-CVE2011-3544
- • Exploit-CVE2012-0507
- • Generic Rootkit.d
- • JS/Exploit-Blacole.kb
- • JS/Exploit-Blacole.kd
- • JS/Redirector
- • PWS-Zbot.gen.any
- • PWS-Zbot.gen.api
- • ZeroAccess.hr
Changes for v10.2.0.991 - v10.2.0.933
- New Detections:
- • Generic PWS.aho
- • PWCrack-PWDump
- • PWCrack-SQLRemote
- • Ramnit.b
- Enhanced Detections:
- • PWCrack-PWDump
- • W32/Autorun.worm.aaeh
Changes for v10.2.0.990 - v10.2.0.991
- New Detections:
- • Exploit-PDF.bp.gen
- • JS/Exploit-Blacole.kd
- • JS/Exploit-Blacole.ke
- Enhanced Detections:
- • BackDoor-FHI
- • Exploit-CVE2012-0158
- • Exploit-PDF.bp.gen
- • FakeAlert-SecurityTool
- • FakeAlert-SysDef
- • FakeAlert-SysDef.ax
- • JS/Exploit-Blacole.em
- • JS/Exploit-Blacole.gc
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.kb
- • JV/Exploit-Blacole
- • PWS-Zbot.gen.any
- • PWS-Zbot.gen.api
- • PWS-Zbot.gen.arw
- • SWF/Exploit-Blacole
- • Vundo
- • W32/Autorun.worm.aaeh
- • ZeroAccess.hr
Changes for v10.2.0.989 - v10.2.0.990
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • FakeAlert-av360
- • JS/Exploit-Blacole.em
- • JS/Exploit-Blacole.jy
- • JS/Exploit-Blacole.jz
- • JS/Exploit-Blacole.ka
- • PWS-Zbot.gen.apr
- • PWS-Zbot.gen.asv
- • W32/Autorun.worm.aaeh
Changes for v10.2.0.988 - v10.2.0.989
- Enhanced Detections:
- • Exploit-CVE2012-0158
- • FakeAlert-SecurityTool
- • Generic Downloader.z
- • Generic FakeAlert
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.kb
- • Vundo
- • W32/Autorun.worm.aaeh
- • ZeroAccess.hr
Changes for v10.2.0.986 - v10.2.0.988
- Enhanced Detections:
- • FakeAlert-SecurityTool
- • FakeAlert-SysDef.ax
- • Generic Downloader.z
- • Generic FakeAlert.gp
- • JS/Exploit-Blacole.jx
- • ZeroAccess.hr
Changes for v10.2.0.985 - v10.2.0.986
- Enhanced Detections:
- • Medfos!env
- • W32/Autorun.worm.aaeh
- • W32/XDocCrypt.a
Changes for v10.2.0.979 - v10.2.0.985
- Enhanced Detections:
- • BackDoor-FHI
- • Exploit-CVE2011-3544
- • Exploit-CVE2012-0158
- • Exploit-CVE2012-0507
- • Exploit-PDF.b
- • FakeAlert-SecurityTool.es
- • FakeAlert-SecurityTool.hc
- • FakeAlert-SysDef
- • Generic Downloader.oj
- • Generic Downloader.z
- • Generic FakeAlert
- • JS/Exploit-Blacole.em
- • JS/Exploit-Blacole.ev
- • JS/Exploit-Blacole.jq
- • JS/Exploit-Blacole.kb
- • PWS-Zbot
- • PWS-Zbot.gen.aqc
- • PWS-Zbot.gen.are
- • PWS-Zbot.gen.arj
- • PWS-Zbot.gen.ary
- • PWS-Zbot.gen.ask
- • PWS-Zbot.gen.atn
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.c
- • W32/Autorun.worm.g
- • W32/Autorun.worm.gp
- • W32/Rimecud
- • W32/XDocCrypt.a
- • ZeroAccess.hr
Changes for v10.2.0.976 - v10.2.0.979
- Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.
- New Detections:
- JS/Exploit-Blacole.kb
- Enhanced Detections:
- Exploit-CVE2012-0507
- Generic FakeAlert.bw
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.gq
- JS/Exploit-Blacole.ju
- JS/Exploit-Blacole.jy
- Medfos.e
- PWS-Zbot.gen.anm
- PWS-Zbot.gen.aob
- PWS-Zbot.gen.aqw
- PWS-Zbot.gen.arb
- PWS-Zbot.gen.arj
- PWS-Zbot.gen.arw
- PWS-Zbot.gen.ary
- ZeroAccess.ic
- ZeroAccess.id
Changes for v10.2.0.971 - v10.2.0.976
- Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.
Changes for v10.2.0.970 - v10.2.0.971
- New Detections:
- • JS/Exploit-Blacole.jz
- • JS/Exploit-Blacole.ka
- • ZeroAccess.id
- Enhanced Detections:
- • Exploit-Blacole
- • Exploit-CVE2012-0158
- • Exploit-CVE2012-0507
- • Generic Downloader.z
- • JS/Exploit-Blacole
- • JS/Exploit-Blacole.em
- • JS/Exploit-Blacole.gq
- • JS/Exploit-Blacole.ht
- • JS/Exploit-Blacole.jy
- • PWS-Zbot.gen.ack
- • PWS-Zbot.gen.aim
- • TDSS.g
- • Vundo
- • W32/Autorun.worm.aaeh
- • W32/Autorun.worm.g
- • W32/Rimecud
- • W32/Rimecud.gen.dq
- • ZeroAccess
- • ZeroAccess.dr.gen.h
- • ZeroAccess.hr
Changes for v10.2.0.961 - v10.2.0.970
- New Detections:
- Medfos!env
- ZeroAccess.ic
- Enhanced Detections:
- Exploit-CVE2011-3544
- FakeAlert-SecurityTool.ha
- FakeAlert-SecurityTool.hc
- Generic Downloader.z
- JS/Exploit-Blacole.eq
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.ev
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.gq
- JS/Exploit-Blacole.ht
- JS/Exploit-Blacole.jq
- JS/Exploit-Blacole.ju
- PWS-Zbot.gen.asj
- VBS/Autorun.worm.k
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.c
- W32/Rimecud.gen.cl
- ZeroAccess
- ZeroAccess.hr
Changes for v10.2.0.959 - v10.2.0.961
- New Detections:
- DarkWalt.e
- Enhanced Detections:
- BackDoor-FHI
- Exploit-CVE2012-0507
- FakeAlert-SecurityTool.fh
- FakeAlert-SecurityTool.fo
- Generic Downloader.z
- Generic FakeAlert.hf
- PWS-OnlineGames.lt
- PWS-Zbot.gen.arw
- PWS-Zbot.gen.atl
- VBS/Autorun.worm.aaaz
- Vundo.gen.hl
- W32/Autorun.Worm.aaeh
- W32/Autorun.worm.aaeh
- W32/Autorun.worm.gt
- ZeroAccess.hr
Changes for v10.2.0.957 - v10.2.0.959
- Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.
- New Detections:
- Enhanced Detections:
- W32/Autorun.worm.c
Changes for v10.2.0.953 - v10.2.0.956
- Enhanced detections are those that have been modified for this release. Detections are enhanced to cover new variants, optimize performance, and correct incorrect identifications.
- New Detections:
- FakeAlert-SecurityTool.hb
- T-TRO-ATM
- T-TRO-ATN
- Enhanced Detections:
- BackDoor-FHI
- Exploit-PDF
- FakeAlert-Rena.dg
- FakeAlert-SecurityTool.es
- FakeAlert-SecurityTool.fo
- Generic Downloader.z
- Generic FakeAlert.bw
- JS/Exploit-Blacole.eq
- JS/Exploit-Blacole.eu
- JS/Exploit-Blacole.gc
- JS/Exploit-Blacole.gq
- JS/Exploit-Blacole.ht
- JS/Redirector
- PWS-Zbot
- PWS-Zbot.gen.apc
- PWS-Zbot.gen.ary
- PWS-Zbot.gen.aua
- VBObfus.g
- W32/Autorun.Worm.aaeh
- ZeroAccess!cfg
